<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="4922">
<package pkgid="89e218b63d77e01f20fbc89ba256cce205495c005873f785148ebb5de263d3ad" name="389-ds-base" arch="i686">
  <version epoch="0" ver="1.3.6.1" rel="19.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-10" date="1493985600">- Bump version to 1.3.6.1-10
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val 
- Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous 
- Resolves: Bug 1377452 - Integer overflow in performance counters
- Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values
- Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-11" date="1493985601">- Bump version to 1.3.6.1-11
- Resolves: Bug 1410207 - Utility command had better use INFO log level for the output
- Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985602">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985603">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.19-1" date="1503316800">- Bump version to 1.3.6.19-1
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
</package>
<package pkgid="1c6b01b13d37f89327c4878aae36c79e46d661c34b77378bd22d904c8e0d8594" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.6.1" rel="19.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-10" date="1493985600">- Bump version to 1.3.6.1-10
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val 
- Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous 
- Resolves: Bug 1377452 - Integer overflow in performance counters
- Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values
- Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-11" date="1493985601">- Bump version to 1.3.6.1-11
- Resolves: Bug 1410207 - Utility command had better use INFO log level for the output
- Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985602">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985603">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.19-1" date="1503316800">- Bump version to 1.3.6.19-1
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
</package>
<package pkgid="0d23cd79c034469beccdcb82b54a91713f661e6f98197cb76ca765b666071339" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.6.1" rel="19.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-10" date="1493985600">- Bump version to 1.3.6.1-10
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val 
- Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous 
- Resolves: Bug 1377452 - Integer overflow in performance counters
- Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values
- Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-11" date="1493985601">- Bump version to 1.3.6.1-11
- Resolves: Bug 1410207 - Utility command had better use INFO log level for the output
- Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985602">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985603">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.19-1" date="1503316800">- Bump version to 1.3.6.19-1
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
</package>
<package pkgid="a8ae1bb0e884735f8ad553cd9930ecddd7f2cab9b6909cb588d267334505a92a" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="19.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-10" date="1493985600">- Bump version to 1.3.6.1-10
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val 
- Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous 
- Resolves: Bug 1377452 - Integer overflow in performance counters
- Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values
- Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-11" date="1493985601">- Bump version to 1.3.6.1-11
- Resolves: Bug 1410207 - Utility command had better use INFO log level for the output
- Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985602">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985603">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.19-1" date="1503316800">- Bump version to 1.3.6.19-1
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
</package>
<package pkgid="e2538f559ed8361b61b95bb606a053b677dbf878c9e3c1c7e3a3d923c601f6f7" name="389-ds-base" arch="i686">
  <version epoch="0" ver="1.3.6.1" rel="21.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985600">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985601">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
</package>
<package pkgid="eadedc7becd4aa5b226530eb0155ef7483ef4196ba86d02684bf6f1c32eb6f3a" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.6.1" rel="21.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985600">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985601">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
</package>
<package pkgid="cc53531851b414b1239177c01c98d99ea2a96805a122e20eb0b5fe82e5bad085" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.6.1" rel="21.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985600">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985601">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
</package>
<package pkgid="0b546ef78413a0d50e3afe1191fe68279a4a9143ac9d43097a3c6ea37d293f55" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="21.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985600">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985601">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
</package>
<package pkgid="0bca07fa5f5feb41d831a00ee0fdb37840e8e6f4bce40e0d3a64166f33e7a307" name="389-ds-base" arch="i686">
  <version epoch="0" ver="1.3.6.1" rel="24.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
</package>
<package pkgid="4f621277f9a452e32e1bfc1a13be33b054ee021c01d87856db0b9f2f5fac3636" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.6.1" rel="24.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
</package>
<package pkgid="295e68d491574693e984fd64daf5dbf8c004263089828814d7a803a82268b79b" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.6.1" rel="24.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
</package>
<package pkgid="e0c4a0abf047c48ddf85454080254633f6d117d9e8a0076e9ef50deb2747363f" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="24.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
</package>
<package pkgid="2e37d60fb0421dbaf25858819d7ce4a73c8a4c3ba32e6a5c534dd579b7ac0cfe" name="389-ds-base" arch="i686">
  <version epoch="0" ver="1.3.6.1" rel="26.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-25
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
</package>
<package pkgid="06f0d992e6f61b28d30e5520090196baef284636c4efaa46c8409faa5406a9b5" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.6.1" rel="26.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-25
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
</package>
<package pkgid="15bc2a31083dda11ee511de38f490cc994c98b4f43546f918a0447aabb1cd1bd" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.6.1" rel="26.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-25
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
</package>
<package pkgid="fc744696cf93921b74f9501114412881ef1d8a9ec040b8a6cb34ff92958fc67a" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="26.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-25
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
</package>
<package pkgid="3877c0b67c2e3ab6f40b07429c07ee68f4b353f83ecc979a14f5bdd824ca855c" name="389-ds-base" arch="i686">
  <version epoch="0" ver="1.3.6.1" rel="28.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-26
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-27" date="1518523200">- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-28" date="1519646400">- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
</package>
<package pkgid="335d850026237ed8dca8b1fa9bcca68ca406cd2f9dfb81e8d184b67a9c05e9c0" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.6.1" rel="28.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-26
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-27" date="1518523200">- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-28" date="1519646400">- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
</package>
<package pkgid="a2ac4406b366356dec5dcc67939108e8a2c669753d03ba4f7f81aa04274d8971" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.6.1" rel="28.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-26
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-27" date="1518523200">- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-28" date="1519646400">- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
</package>
<package pkgid="c8af429e02fc2c41c992a015bcadaa029265b16bdc42c7a000ea524b935e3704" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="28.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-26
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-27" date="1518523200">- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-28" date="1519646400">- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
</package>
<package pkgid="1f2698c37cecefa12ddb6ff524d67277ce008db84642e26b8d12648b170d3d54" name="389-ds-base-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.6.1" rel="19.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-10" date="1493985600">- Bump version to 1.3.6.1-10
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val 
- Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous 
- Resolves: Bug 1377452 - Integer overflow in performance counters
- Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values
- Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-11" date="1493985601">- Bump version to 1.3.6.1-11
- Resolves: Bug 1410207 - Utility command had better use INFO log level for the output
- Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985602">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985603">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.19-1" date="1503316800">- Bump version to 1.3.6.19-1
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
</package>
<package pkgid="0955f13ef469ab8c4b9f2a65bd1731b77853c778ac8bf0150e37f7849b5e245f" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="19.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-10" date="1493985600">- Bump version to 1.3.6.1-10
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val 
- Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous 
- Resolves: Bug 1377452 - Integer overflow in performance counters
- Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values
- Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-11" date="1493985601">- Bump version to 1.3.6.1-11
- Resolves: Bug 1410207 - Utility command had better use INFO log level for the output
- Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985602">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985603">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.19-1" date="1503316800">- Bump version to 1.3.6.19-1
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
</package>
<package pkgid="eedb27e16e5a282e06641bd077d7884bd91ac0aefd92057aa7dd398503896ae7" name="389-ds-base-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.6.1" rel="21.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985600">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985601">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
</package>
<package pkgid="7512732d7ec2ccbed143786b59710342615c92d24b12224366fb80aaddd48096" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="21.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985600">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985601">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
</package>
<package pkgid="ef5f03e22c32aca5f843f768835869a10d5932f988dba2c538c1e220183ac5fa" name="389-ds-base-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.6.1" rel="24.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
</package>
<package pkgid="2da595fe07bb862031bd80bfc191bc335bcd27cb2ef34bd2da45c1af4db83ed4" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="24.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
</package>
<package pkgid="567b1738ed3093043bcaf1860666d3521d0134432228e56bd1be70a75fc0c985" name="389-ds-base-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.6.1" rel="26.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-25
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
</package>
<package pkgid="3832787b0a5824c9655ac3a1b4890014fee025d0e600f5aa7ae35035c8bcdba5" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="26.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-25
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
</package>
<package pkgid="6bae210dd481c100ce924da2e2488f3a3a2edb8b9fd9b63aec4578021f04bb59" name="389-ds-base-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.6.1" rel="28.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-26
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-27" date="1518523200">- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-28" date="1519646400">- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
</package>
<package pkgid="f57414028c5cddf2d9065428a34a468b5ad889eb8c85fdef4935558f2e915034" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="28.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-26
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-27" date="1518523200">- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-28" date="1519646400">- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
</package>
<package pkgid="3ca8fdc0096696483a864703622a5649346069b5c2d7eca92f6273774f53bf55" name="389-ds-base-devel" arch="i686">
  <version epoch="0" ver="1.3.6.1" rel="19.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-10" date="1493985600">- Bump version to 1.3.6.1-10
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val 
- Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous 
- Resolves: Bug 1377452 - Integer overflow in performance counters
- Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values
- Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-11" date="1493985601">- Bump version to 1.3.6.1-11
- Resolves: Bug 1410207 - Utility command had better use INFO log level for the output
- Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985602">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985603">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.19-1" date="1503316800">- Bump version to 1.3.6.19-1
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
</package>
<package pkgid="31faad80ceac7a1151df546a5f6d197cdb0d9217f1198d6976d620ee04cf1e00" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="19.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-10" date="1493985600">- Bump version to 1.3.6.1-10
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val 
- Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous 
- Resolves: Bug 1377452 - Integer overflow in performance counters
- Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values
- Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-11" date="1493985601">- Bump version to 1.3.6.1-11
- Resolves: Bug 1410207 - Utility command had better use INFO log level for the output
- Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985602">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985603">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.19-1" date="1503316800">- Bump version to 1.3.6.19-1
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
</package>
<package pkgid="f769aa5dd907630e2092612fed4adbe3c6593d1a1b60ee1509c3765b966e1e39" name="389-ds-base-devel" arch="i686">
  <version epoch="0" ver="1.3.6.1" rel="21.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985600">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985601">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
</package>
<package pkgid="9e9c251f286d1cc02d646816e804dfcf1a09ff5152633cea59c45d6d181a7ef8" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="21.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985600">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985601">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
</package>
<package pkgid="28a6b2e556e80dccce00e94c39fd8f9e7dea0bcdae1c8d9512a5da13d219b6f7" name="389-ds-base-devel" arch="i686">
  <version epoch="0" ver="1.3.6.1" rel="24.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
</package>
<package pkgid="b18c4e861d6f769fb80e97f2b0df71063669df0186a39191e39e1dc9893a9001" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="24.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
</package>
<package pkgid="77a9c00a8fa5727179d507ff83df414df400042324f77c7ebdafba32de3ff40a" name="389-ds-base-devel" arch="i686">
  <version epoch="0" ver="1.3.6.1" rel="26.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-25
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
</package>
<package pkgid="567158d6d2a90e990f6f7bf4e9a6d64a04ef73b01a375b1bec3a2e63194f56ec" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="26.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-25
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
</package>
<package pkgid="2dd01992c58f4305e5f18caaeed3211838424d22cb263cb4da55b01eb46dac86" name="389-ds-base-devel" arch="i686">
  <version epoch="0" ver="1.3.6.1" rel="28.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-26
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-27" date="1518523200">- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-28" date="1519646400">- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
</package>
<package pkgid="f57bd232ac8a70444037a7f50dcedac1e0fdd050cac3c5d740ffbfba5c5970ea" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="28.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-26
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-27" date="1518523200">- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-28" date="1519646400">- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
</package>
<package pkgid="78fbcba4309dd929cfe15092507d71f4c02ce3c23f9c1f911cbe360c07660352" name="389-ds-base-libs" arch="i686">
  <version epoch="0" ver="1.3.6.1" rel="19.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-10" date="1493985600">- Bump version to 1.3.6.1-10
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val 
- Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous 
- Resolves: Bug 1377452 - Integer overflow in performance counters
- Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values
- Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-11" date="1493985601">- Bump version to 1.3.6.1-11
- Resolves: Bug 1410207 - Utility command had better use INFO log level for the output
- Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985602">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985603">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.19-1" date="1503316800">- Bump version to 1.3.6.19-1
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
</package>
<package pkgid="10f3dddfbfd6745546fd3b4d7d740399089383c161719f8a27fe6b668ebbad56" name="389-ds-base-libs" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="19.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-10" date="1493985600">- Bump version to 1.3.6.1-10
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val 
- Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous 
- Resolves: Bug 1377452 - Integer overflow in performance counters
- Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values
- Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-11" date="1493985601">- Bump version to 1.3.6.1-11
- Resolves: Bug 1410207 - Utility command had better use INFO log level for the output
- Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985602">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985603">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.19-1" date="1503316800">- Bump version to 1.3.6.19-1
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
</package>
<package pkgid="0c1931d1b5033411d249f1ff7d20a9291fc5c864c7221d59385410a2b7c4df31" name="389-ds-base-libs" arch="i686">
  <version epoch="0" ver="1.3.6.1" rel="21.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985600">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985601">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
</package>
<package pkgid="c53c5bd940d60556a5df339b57e7073fd98462e60b1ff10c30341b25e7e7f8f5" name="389-ds-base-libs" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="21.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985600">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985601">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
</package>
<package pkgid="0286d58a6c19b4cd52b326253712b75fa5ae6271321988766feb2d4e4fb49773" name="389-ds-base-libs" arch="i686">
  <version epoch="0" ver="1.3.6.1" rel="24.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
</package>
<package pkgid="4e90d71323c127eed0527db9f2a7c06ed1647358cea89a5683f218a38a2707e2" name="389-ds-base-libs" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="24.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
</package>
<package pkgid="310115685d2ec29e1c006e9a3345887b503e71065a693451c9166b79590b4101" name="389-ds-base-libs" arch="i686">
  <version epoch="0" ver="1.3.6.1" rel="26.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-25
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
</package>
<package pkgid="416b8b1c834476e0b7349727b823a59952fd4d27be229597aa57341ac2eeb7e6" name="389-ds-base-libs" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="26.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-25
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
</package>
<package pkgid="853f95be69c1b1130d86b51042a9b59fcff373b7318d01a8bf24f4d0fa45106d" name="389-ds-base-libs" arch="i686">
  <version epoch="0" ver="1.3.6.1" rel="28.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-26
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-27" date="1518523200">- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-28" date="1519646400">- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
</package>
<package pkgid="f8169bb1f52b3d50c678cc357c9429ce85b73b1e634e3cd6fe1e351f13825463" name="389-ds-base-libs" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="28.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-26
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-27" date="1518523200">- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-28" date="1519646400">- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
</package>
<package pkgid="22fe5fef416f73d49cffd5fc32af365a28957a100986b85d7b419765016b7fc8" name="389-ds-base-snmp" arch="i686">
  <version epoch="0" ver="1.3.6.1" rel="19.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-10" date="1493985600">- Bump version to 1.3.6.1-10
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val 
- Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous 
- Resolves: Bug 1377452 - Integer overflow in performance counters
- Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values
- Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-11" date="1493985601">- Bump version to 1.3.6.1-11
- Resolves: Bug 1410207 - Utility command had better use INFO log level for the output
- Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985602">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985603">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.19-1" date="1503316800">- Bump version to 1.3.6.19-1
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
</package>
<package pkgid="437ed4411d044af6d27a45cb952778bb82decd99e46d8d2752dd1377c2df2760" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="19.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-10" date="1493985600">- Bump version to 1.3.6.1-10
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val 
- Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous 
- Resolves: Bug 1377452 - Integer overflow in performance counters
- Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values
- Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-11" date="1493985601">- Bump version to 1.3.6.1-11
- Resolves: Bug 1410207 - Utility command had better use INFO log level for the output
- Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985602">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985603">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.19-1" date="1503316800">- Bump version to 1.3.6.19-1
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
</package>
<package pkgid="1cafc7228abbd422fb32ec14820456bb3e135df7837a32e6207b31c42449df46" name="389-ds-base-snmp" arch="i686">
  <version epoch="0" ver="1.3.6.1" rel="21.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985600">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985601">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
</package>
<package pkgid="4c035fa532092cc58f52a7dc1e4f93770f281db77ce02bbc80da6a15b062d9a0" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="21.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985600">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985601">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
</package>
<package pkgid="aa2174529e788a38671c407e836d0316fa9a7f709b1f3afc4e56586684335e0c" name="389-ds-base-snmp" arch="i686">
  <version epoch="0" ver="1.3.6.1" rel="24.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
</package>
<package pkgid="bb720d27e6c7c674ddb90f8c227e8c93afb9f331db0d22ad4d0e9340965e1dbc" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="24.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
</package>
<package pkgid="438342ffc3621acfb067d55abec58673f1c258b780034a35ff3fc84a30a94991" name="389-ds-base-snmp" arch="i686">
  <version epoch="0" ver="1.3.6.1" rel="26.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-25
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
</package>
<package pkgid="14afe3e0ffadfcd1c8340a417274f66e9aa3474e227270b6570d8a205ffbc5a3" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="26.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-25
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
</package>
<package pkgid="1e1e0d778e666c6e3200830f0d16c18d7ca330ea323877c9cfec78f554b67488" name="389-ds-base-snmp" arch="i686">
  <version epoch="0" ver="1.3.6.1" rel="28.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-26
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-27" date="1518523200">- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-28" date="1519646400">- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
</package>
<package pkgid="edd59fcacd30ebf5618021fe89b9fe218d6708609645721b1eba37de1ef7cff3" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="28.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-26
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-27" date="1518523200">- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-28" date="1519646400">- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
</package>
<package pkgid="1d2ee6a9f66a1a2953b3d7758eddb4e0bd4fe07a91891d0d4f18331dcd3dcd15" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.6.1" rel="19.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-10" date="1493985600">- Bump version to 1.3.6.1-10
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val 
- Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous 
- Resolves: Bug 1377452 - Integer overflow in performance counters
- Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values
- Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-11" date="1493985601">- Bump version to 1.3.6.1-11
- Resolves: Bug 1410207 - Utility command had better use INFO log level for the output
- Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985602">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985603">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.19-1" date="1503316800">- Bump version to 1.3.6.19-1
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
</package>
<package pkgid="fa81ee0a0f4088147aacd1c43fdcfebf1e1425cdcb0fdab213777b2f7f0ca244" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.6.1" rel="19.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-10" date="1493985600">- Bump version to 1.3.6.1-10
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val 
- Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous 
- Resolves: Bug 1377452 - Integer overflow in performance counters
- Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values
- Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-11" date="1493985601">- Bump version to 1.3.6.1-11
- Resolves: Bug 1410207 - Utility command had better use INFO log level for the output
- Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985602">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985603">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.19-1" date="1503316800">- Bump version to 1.3.6.19-1
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
</package>
<package pkgid="a3d5e427b0beb75890a3d17a99c0b9298e24c8c279d02ab70856deb4a42c0e46" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.6.1" rel="21.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985600">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985601">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
</package>
<package pkgid="eeedaaa91a72526b585794aef250b0847ee1c31fee2cf447346b946620aa627b" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.6.1" rel="21.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985600">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985601">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
</package>
<package pkgid="b77c9e690311482338e2e9a44b45f3a03d4430af5179ad35d6c97494bee93944" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.6.1" rel="24.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
</package>
<package pkgid="b63ec16861793e30a1142204975fd597434438e2be8f338608a4306c6679c6d9" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.6.1" rel="24.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
</package>
<package pkgid="3210271cc8b7b31463eb7f1c7ac8a56793f0e8b80e715b17296ae088fdac5944" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.6.1" rel="26.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-25
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
</package>
<package pkgid="c3eb8a6b337ff8ddc0e511d01b0f0648f6b0066d6fa23e4a3faeebe327afe0ca" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.6.1" rel="26.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-25
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
</package>
<package pkgid="2287f8f429db900d7a361d81dd80ca11be1d58f8b9e9254baa0155369c292cc9" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.6.1" rel="28.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-26
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-27" date="1518523200">- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-28" date="1519646400">- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
</package>
<package pkgid="d51b6e737801966669738998f160a0ff2cc720acb52dc73ab6785c14d247df88" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.6.1" rel="28.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-26
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-27" date="1518523200">- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-28" date="1519646400">- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
</package>
<package pkgid="a4f419c2ecb83012a02da853007e3bab3002218960c3577f188119179d69e80f" name="NetworkManager" arch="i686">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="4631e729cb6c5f3cbc42599e3c0c8045c7106e4d49d18a8cf866ab4a7e5519b9" name="NetworkManager" arch="src">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="0874dd34f8a4d652c1a951c0d9c07e5794fe5f7c1866e5e3acee2e4113441f40" name="NetworkManager" arch="src">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="5bcc70da638f5daa734413281bf1505d51829050866a94eeb7197ec63ae33376" name="NetworkManager" arch="x86_64">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="5b2d224cbf1aa8cea871992a9db7d5ba0135c04cd5852b1f05767fb549540543" name="NetworkManager-adsl" arch="i686">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="0bcf7c27a17c3a066eae3a9aa8d974bacd4f85e7f59d59bc568083a3f61c0b27" name="NetworkManager-adsl" arch="x86_64">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="cb156b9d9fae5890803b60a9ff997ffad37c14792187a8d1ebe5baa263cc3454" name="NetworkManager-bluetooth" arch="i686">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="32315c4ced17e840a131e863da695f0a1c139219dfc74ff16d9364d402d22898" name="NetworkManager-bluetooth" arch="x86_64">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="46fb19ffc6962f46b52cd9bca3e0bbf61b7bd28533989f76540e8fb4d21d4b52" name="NetworkManager-config-server" arch="noarch">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="73050423bd396d816abf55c17157cead61ae440f3bfa9deb1493c34f42698c9c" name="NetworkManager-config-server" arch="noarch">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="4e5f17d1f45853b3a17c2e8acd33dd2e8b36b12977477e2776ab3ff28e241e5b" name="NetworkManager-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="f8333b4448bd9888456df75cf36af733db95c04c0ba59aab3fde5d184b0c9bf3" name="NetworkManager-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="1572f9948089272027ce972281a78217f225902392480f73be037ac6e351ffc6" name="NetworkManager-dispatcher-routing-rules" arch="noarch">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="5a877a7252b946b484f7371bf2e46146ac362f38b52c982d70cf2781ce7f2afe" name="NetworkManager-dispatcher-routing-rules" arch="noarch">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="c11206819061bc201af55e394325ab72b01cfd6ba7b1cf189c761ab215ef6168" name="NetworkManager-glib" arch="i686">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="f7749dcc477d0a85518e64c4fa71e0acde8de9ff193f4340b369f4cd710084fa" name="NetworkManager-glib" arch="x86_64">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="8e45d9233a8fe0e14b558a299e772d4318949a0e35a58f444284eeca10eac27e" name="NetworkManager-glib-devel" arch="i686">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="88bc40d733f59a5eaf374d0237c15dc22adfbb4d45933893819a81a1b8fdc2f8" name="NetworkManager-glib-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="4e86699975dbaf22b3b9af221475982b49f04a83be4e2ff576216c6083bb0dbc" name="NetworkManager-libnm" arch="i686">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="9440884e91e04b345d639f71672bab9a888839dcd0fa19112292c9e6ade65e67" name="NetworkManager-libnm" arch="x86_64">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="b97cda1e0422235e69fad8a7ecc46502313a57ded75e7a8fa95aff0cd4fcf7ba" name="NetworkManager-libnm-devel" arch="i686">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="0b653bb2393dab082197e50bd1689fce0162a00dc723501c951782ccecbd5aba" name="NetworkManager-libnm-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="a7cfa0f4c3b8dec44556c2b3d382e2a1189f73b280b8384d5396abb9bfa2279e" name="NetworkManager-ppp" arch="i686">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="6e7a1f2ebefdd67bcd6bb8ac516e9d602cb1f79b6498878400a41eb001d7586b" name="NetworkManager-ppp" arch="x86_64">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="f38f3bc40b2f7fb0e12c22a35683590bcd21f31f226beb5103617dcddb422629" name="NetworkManager-team" arch="i686">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="ff1620d187415b6313b3671aa003714207154d18d58e536f6570f82bc681ac1e" name="NetworkManager-team" arch="x86_64">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="7e831cc7e74c590bf53f6f7f9efdcc98f74cbdb4e5452c637231275fb304a443" name="NetworkManager-tui" arch="i686">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="bca93a6df3dc62c19037e609d9383912fe307d2719e4149a17d0a5dd6219d646" name="NetworkManager-tui" arch="x86_64">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="a5c74db6e7f002d2c966f1304316a38513b5f883982be5b6d1e038254a893d7d" name="NetworkManager-wifi" arch="i686">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="3c206b0344033be6c7530320f7ba1e9d48d4d04059b9172093bbff3d09b12f90" name="NetworkManager-wifi" arch="x86_64">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="dfc28fbd88eeecddf9f0e6b9a901bd16f9313b6ef3dc2f0b3fd37251ebb25a49" name="NetworkManager-wwan" arch="i686">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="eba409027036b2ee4f11809aad3f7bbbd3075904a1f62032a556ec1d7005e884" name="NetworkManager-wwan" arch="x86_64">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="6998ec61bfc24f05606de11cb16ae8c9628d81f9140c5f53b4bb43de4cb07afb" name="accountsservice" arch="i686">
  <version epoch="0" ver="0.6.45" rel="3.el7_4.1"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.6.35-9" date="1433764800">- Start after nsswitch and ypbind
  Resolves: #1217439</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-10" date="1467288000">- scale to a large number of remote users better
  Resolves: #1220904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-11" date="1467374400">- address minor bug in previous patch
  Related: #1220904

- fix memory leak in log handler
  Resolves: #1292543</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-12" date="1473163200">- hide users with /sbin/nologin shell
  Resolves: #1341276</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.6.42-1" date="1476964800">- Update to 0.6.42
- Resolves: #1424623</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.42-2" date="1490616000">- Update to 0.6.44
  Related: #1424623
- export password expiration policy from shadow
  Resolves: #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-1" date="1490616001">- Update to 0.6.45 so password expiration policy is wrapped by libaccountsservice
  Related: #1424623 #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-2" date="1494849600">- Don't tread explicitly requested users as cached
  Fixes UncacheUser operation.
  Resolves: 1446620
  Related: #1432602</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3.1" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
</package>
<package pkgid="189a7cd249241d0be37833180539ddf7a68356b5617c18dc35420f64616c52f9" name="accountsservice" arch="src">
  <version epoch="0" ver="0.6.45" rel="3.el7_4.1"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.6.35-9" date="1433764800">- Start after nsswitch and ypbind
  Resolves: #1217439</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-10" date="1467288000">- scale to a large number of remote users better
  Resolves: #1220904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-11" date="1467374400">- address minor bug in previous patch
  Related: #1220904

- fix memory leak in log handler
  Resolves: #1292543</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-12" date="1473163200">- hide users with /sbin/nologin shell
  Resolves: #1341276</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.6.42-1" date="1476964800">- Update to 0.6.42
- Resolves: #1424623</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.42-2" date="1490616000">- Update to 0.6.44
  Related: #1424623
- export password expiration policy from shadow
  Resolves: #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-1" date="1490616001">- Update to 0.6.45 so password expiration policy is wrapped by libaccountsservice
  Related: #1424623 #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-2" date="1494849600">- Don't tread explicitly requested users as cached
  Fixes UncacheUser operation.
  Resolves: 1446620
  Related: #1432602</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3.1" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
</package>
<package pkgid="65b3d15c2c074411dcc61b345fff9346082ed06b8be4751e1d9910ad9e713556" name="accountsservice" arch="src">
  <version epoch="0" ver="0.6.45" rel="3.el7_4.1"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.6.35-9" date="1433764800">- Start after nsswitch and ypbind
  Resolves: #1217439</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-10" date="1467288000">- scale to a large number of remote users better
  Resolves: #1220904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-11" date="1467374400">- address minor bug in previous patch
  Related: #1220904

- fix memory leak in log handler
  Resolves: #1292543</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-12" date="1473163200">- hide users with /sbin/nologin shell
  Resolves: #1341276</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.6.42-1" date="1476964800">- Update to 0.6.42
- Resolves: #1424623</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.42-2" date="1490616000">- Update to 0.6.44
  Related: #1424623
- export password expiration policy from shadow
  Resolves: #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-1" date="1490616001">- Update to 0.6.45 so password expiration policy is wrapped by libaccountsservice
  Related: #1424623 #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-2" date="1494849600">- Don't tread explicitly requested users as cached
  Fixes UncacheUser operation.
  Resolves: 1446620
  Related: #1432602</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3.1" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
</package>
<package pkgid="ef220d264df1b7ae635ca9dac4af2e95e7ead74df0b44c297d4f88e342770194" name="accountsservice" arch="x86_64">
  <version epoch="0" ver="0.6.45" rel="3.el7_4.1"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.6.35-9" date="1433764800">- Start after nsswitch and ypbind
  Resolves: #1217439</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-10" date="1467288000">- scale to a large number of remote users better
  Resolves: #1220904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-11" date="1467374400">- address minor bug in previous patch
  Related: #1220904

- fix memory leak in log handler
  Resolves: #1292543</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-12" date="1473163200">- hide users with /sbin/nologin shell
  Resolves: #1341276</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.6.42-1" date="1476964800">- Update to 0.6.42
- Resolves: #1424623</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.42-2" date="1490616000">- Update to 0.6.44
  Related: #1424623
- export password expiration policy from shadow
  Resolves: #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-1" date="1490616001">- Update to 0.6.45 so password expiration policy is wrapped by libaccountsservice
  Related: #1424623 #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-2" date="1494849600">- Don't tread explicitly requested users as cached
  Fixes UncacheUser operation.
  Resolves: 1446620
  Related: #1432602</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3.1" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
</package>
<package pkgid="fa6b2234f86c4aaf73c7f0824019cacfaaff1342abd1b269c17fd7c5b798bce4" name="accountsservice-debuginfo" arch="i686">
  <version epoch="0" ver="0.6.45" rel="3.el7_4.1"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.6.35-9" date="1433764800">- Start after nsswitch and ypbind
  Resolves: #1217439</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-10" date="1467288000">- scale to a large number of remote users better
  Resolves: #1220904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-11" date="1467374400">- address minor bug in previous patch
  Related: #1220904

- fix memory leak in log handler
  Resolves: #1292543</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-12" date="1473163200">- hide users with /sbin/nologin shell
  Resolves: #1341276</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.6.42-1" date="1476964800">- Update to 0.6.42
- Resolves: #1424623</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.42-2" date="1490616000">- Update to 0.6.44
  Related: #1424623
- export password expiration policy from shadow
  Resolves: #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-1" date="1490616001">- Update to 0.6.45 so password expiration policy is wrapped by libaccountsservice
  Related: #1424623 #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-2" date="1494849600">- Don't tread explicitly requested users as cached
  Fixes UncacheUser operation.
  Resolves: 1446620
  Related: #1432602</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3.1" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
</package>
<package pkgid="84acda13ad1cf7f603e2c154cecef8bdff75d0fec97604b1ce86c9fe3f9eb26b" name="accountsservice-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.6.45" rel="3.el7_4.1"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.6.35-9" date="1433764800">- Start after nsswitch and ypbind
  Resolves: #1217439</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-10" date="1467288000">- scale to a large number of remote users better
  Resolves: #1220904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-11" date="1467374400">- address minor bug in previous patch
  Related: #1220904

- fix memory leak in log handler
  Resolves: #1292543</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-12" date="1473163200">- hide users with /sbin/nologin shell
  Resolves: #1341276</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.6.42-1" date="1476964800">- Update to 0.6.42
- Resolves: #1424623</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.42-2" date="1490616000">- Update to 0.6.44
  Related: #1424623
- export password expiration policy from shadow
  Resolves: #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-1" date="1490616001">- Update to 0.6.45 so password expiration policy is wrapped by libaccountsservice
  Related: #1424623 #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-2" date="1494849600">- Don't tread explicitly requested users as cached
  Fixes UncacheUser operation.
  Resolves: 1446620
  Related: #1432602</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3.1" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
</package>
<package pkgid="e07f00b4de00309e36bd5da76cab3efcd04084a43b9dc09ead95a478419df71a" name="accountsservice-devel" arch="i686">
  <version epoch="0" ver="0.6.45" rel="3.el7_4.1"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.6.35-9" date="1433764800">- Start after nsswitch and ypbind
  Resolves: #1217439</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-10" date="1467288000">- scale to a large number of remote users better
  Resolves: #1220904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-11" date="1467374400">- address minor bug in previous patch
  Related: #1220904

- fix memory leak in log handler
  Resolves: #1292543</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-12" date="1473163200">- hide users with /sbin/nologin shell
  Resolves: #1341276</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.6.42-1" date="1476964800">- Update to 0.6.42
- Resolves: #1424623</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.42-2" date="1490616000">- Update to 0.6.44
  Related: #1424623
- export password expiration policy from shadow
  Resolves: #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-1" date="1490616001">- Update to 0.6.45 so password expiration policy is wrapped by libaccountsservice
  Related: #1424623 #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-2" date="1494849600">- Don't tread explicitly requested users as cached
  Fixes UncacheUser operation.
  Resolves: 1446620
  Related: #1432602</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3.1" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
</package>
<package pkgid="1a7ed8aa19836f13c6fb6ede2c0001894f39f78d6eda72931910f22dcb1f355a" name="accountsservice-devel" arch="x86_64">
  <version epoch="0" ver="0.6.45" rel="3.el7_4.1"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.6.35-9" date="1433764800">- Start after nsswitch and ypbind
  Resolves: #1217439</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-10" date="1467288000">- scale to a large number of remote users better
  Resolves: #1220904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-11" date="1467374400">- address minor bug in previous patch
  Related: #1220904

- fix memory leak in log handler
  Resolves: #1292543</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-12" date="1473163200">- hide users with /sbin/nologin shell
  Resolves: #1341276</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.6.42-1" date="1476964800">- Update to 0.6.42
- Resolves: #1424623</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.42-2" date="1490616000">- Update to 0.6.44
  Related: #1424623
- export password expiration policy from shadow
  Resolves: #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-1" date="1490616001">- Update to 0.6.45 so password expiration policy is wrapped by libaccountsservice
  Related: #1424623 #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-2" date="1494849600">- Don't tread explicitly requested users as cached
  Fixes UncacheUser operation.
  Resolves: 1446620
  Related: #1432602</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3.1" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
</package>
<package pkgid="e7af4609f75d4fbfb5ae09b52a1533cd724c08cfde9537bf38f56607a0eae160" name="accountsservice-libs" arch="i686">
  <version epoch="0" ver="0.6.45" rel="3.el7_4.1"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.6.35-9" date="1433764800">- Start after nsswitch and ypbind
  Resolves: #1217439</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-10" date="1467288000">- scale to a large number of remote users better
  Resolves: #1220904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-11" date="1467374400">- address minor bug in previous patch
  Related: #1220904

- fix memory leak in log handler
  Resolves: #1292543</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-12" date="1473163200">- hide users with /sbin/nologin shell
  Resolves: #1341276</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.6.42-1" date="1476964800">- Update to 0.6.42
- Resolves: #1424623</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.42-2" date="1490616000">- Update to 0.6.44
  Related: #1424623
- export password expiration policy from shadow
  Resolves: #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-1" date="1490616001">- Update to 0.6.45 so password expiration policy is wrapped by libaccountsservice
  Related: #1424623 #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-2" date="1494849600">- Don't tread explicitly requested users as cached
  Fixes UncacheUser operation.
  Resolves: 1446620
  Related: #1432602</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3.1" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
</package>
<package pkgid="9713a38e709a7ad243a0caa86cef07c2a3bbc8b95f4e6ad23755b4f841fe7659" name="accountsservice-libs" arch="x86_64">
  <version epoch="0" ver="0.6.45" rel="3.el7_4.1"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.6.35-9" date="1433764800">- Start after nsswitch and ypbind
  Resolves: #1217439</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-10" date="1467288000">- scale to a large number of remote users better
  Resolves: #1220904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-11" date="1467374400">- address minor bug in previous patch
  Related: #1220904

- fix memory leak in log handler
  Resolves: #1292543</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-12" date="1473163200">- hide users with /sbin/nologin shell
  Resolves: #1341276</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.6.42-1" date="1476964800">- Update to 0.6.42
- Resolves: #1424623</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.42-2" date="1490616000">- Update to 0.6.44
  Related: #1424623
- export password expiration policy from shadow
  Resolves: #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-1" date="1490616001">- Update to 0.6.45 so password expiration policy is wrapped by libaccountsservice
  Related: #1424623 #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-2" date="1494849600">- Don't tread explicitly requested users as cached
  Fixes UncacheUser operation.
  Resolves: 1446620
  Related: #1432602</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3.1" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
</package>
<package pkgid="625b57d2f4af8d78d01ad8d91514067882fce379ccdb7f28703d819136011cab" name="apr" arch="i686">
  <version epoch="0" ver="1.4.8" rel="3.el7_4.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-2" date="1341576000">- pull fix for apr_mcast_hops from upstream</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-3" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-4" date="1353585600">- update license</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.6-5" date="1355313600">- fix strict-aliasing gcc warning
- remove unused SHA384 and SHA512 code</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-6" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-7" date="1369828800">- update config.* for aarch64 (#925009)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.8-1" date="1372075200">- update to 1.4.8 (#976972)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.4.8-3.1" date="1509364800">- Resolves: #1507349 - CVE-2017-12613 apr: Out-of-bounds array deref
  in apr_time_exp*() functions</changelog>
</package>
<package pkgid="2dd100adcb103918d42e6efb9c5385eec36388af88df97cdcf92c28fd269d54e" name="apr" arch="src">
  <version epoch="0" ver="1.4.8" rel="3.el7_4.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-2" date="1341576000">- pull fix for apr_mcast_hops from upstream</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-3" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-4" date="1353585600">- update license</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.6-5" date="1355313600">- fix strict-aliasing gcc warning
- remove unused SHA384 and SHA512 code</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-6" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-7" date="1369828800">- update config.* for aarch64 (#925009)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.8-1" date="1372075200">- update to 1.4.8 (#976972)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.4.8-3.1" date="1509364800">- Resolves: #1507349 - CVE-2017-12613 apr: Out-of-bounds array deref
  in apr_time_exp*() functions</changelog>
</package>
<package pkgid="de5affe34b3f585a4845b67e56f4deed79127f9e86d28640ca6654689c3ddc34" name="apr" arch="src">
  <version epoch="0" ver="1.4.8" rel="3.el7_4.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-2" date="1341576000">- pull fix for apr_mcast_hops from upstream</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-3" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-4" date="1353585600">- update license</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.6-5" date="1355313600">- fix strict-aliasing gcc warning
- remove unused SHA384 and SHA512 code</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-6" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-7" date="1369828800">- update config.* for aarch64 (#925009)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.8-1" date="1372075200">- update to 1.4.8 (#976972)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.4.8-3.1" date="1509364800">- Resolves: #1507349 - CVE-2017-12613 apr: Out-of-bounds array deref
  in apr_time_exp*() functions</changelog>
</package>
<package pkgid="661344884e88b275449120a97f9b9893c5302ce04f15951474e389f77e468929" name="apr" arch="x86_64">
  <version epoch="0" ver="1.4.8" rel="3.el7_4.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-2" date="1341576000">- pull fix for apr_mcast_hops from upstream</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-3" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-4" date="1353585600">- update license</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.6-5" date="1355313600">- fix strict-aliasing gcc warning
- remove unused SHA384 and SHA512 code</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-6" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-7" date="1369828800">- update config.* for aarch64 (#925009)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.8-1" date="1372075200">- update to 1.4.8 (#976972)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.4.8-3.1" date="1509364800">- Resolves: #1507349 - CVE-2017-12613 apr: Out-of-bounds array deref
  in apr_time_exp*() functions</changelog>
</package>
<package pkgid="3474618c85e34cdeb982c1ecb52401e0f7f7bbad1d865b0b017bde21c7a72744" name="apr-debuginfo" arch="i686">
  <version epoch="0" ver="1.4.8" rel="3.el7_4.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-2" date="1341576000">- pull fix for apr_mcast_hops from upstream</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-3" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-4" date="1353585600">- update license</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.6-5" date="1355313600">- fix strict-aliasing gcc warning
- remove unused SHA384 and SHA512 code</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-6" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-7" date="1369828800">- update config.* for aarch64 (#925009)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.8-1" date="1372075200">- update to 1.4.8 (#976972)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.4.8-3.1" date="1509364800">- Resolves: #1507349 - CVE-2017-12613 apr: Out-of-bounds array deref
  in apr_time_exp*() functions</changelog>
</package>
<package pkgid="e53a8fe2c72547a3d6bf1db3fcbeb2a95a942fbe6b8f2dd05e6b792aad76fd12" name="apr-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.8" rel="3.el7_4.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-2" date="1341576000">- pull fix for apr_mcast_hops from upstream</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-3" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-4" date="1353585600">- update license</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.6-5" date="1355313600">- fix strict-aliasing gcc warning
- remove unused SHA384 and SHA512 code</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-6" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-7" date="1369828800">- update config.* for aarch64 (#925009)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.8-1" date="1372075200">- update to 1.4.8 (#976972)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.4.8-3.1" date="1509364800">- Resolves: #1507349 - CVE-2017-12613 apr: Out-of-bounds array deref
  in apr_time_exp*() functions</changelog>
</package>
<package pkgid="812e7665d99f34190a4a7b9ec1562668b1d29c872e62d191f57a604f62fd1cda" name="apr-devel" arch="i686">
  <version epoch="0" ver="1.4.8" rel="3.el7_4.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-2" date="1341576000">- pull fix for apr_mcast_hops from upstream</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-3" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-4" date="1353585600">- update license</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.6-5" date="1355313600">- fix strict-aliasing gcc warning
- remove unused SHA384 and SHA512 code</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-6" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-7" date="1369828800">- update config.* for aarch64 (#925009)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.8-1" date="1372075200">- update to 1.4.8 (#976972)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.4.8-3.1" date="1509364800">- Resolves: #1507349 - CVE-2017-12613 apr: Out-of-bounds array deref
  in apr_time_exp*() functions</changelog>
</package>
<package pkgid="3037b1ac651cc3b9647903cf04f5b381301680b3e96c4c5606e381c0d8ab81b4" name="apr-devel" arch="x86_64">
  <version epoch="0" ver="1.4.8" rel="3.el7_4.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-2" date="1341576000">- pull fix for apr_mcast_hops from upstream</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-3" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-4" date="1353585600">- update license</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.6-5" date="1355313600">- fix strict-aliasing gcc warning
- remove unused SHA384 and SHA512 code</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-6" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-7" date="1369828800">- update config.* for aarch64 (#925009)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.8-1" date="1372075200">- update to 1.4.8 (#976972)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.4.8-3.1" date="1509364800">- Resolves: #1507349 - CVE-2017-12613 apr: Out-of-bounds array deref
  in apr_time_exp*() functions</changelog>
</package>
<package pkgid="fc692631955e9b7316730ae3cb148d6bf688ee6f7636028cae6bebd2ada09f88" name="at" arch="i686">
  <version epoch="0" ver="3.1.13" rel="22.el7_4.2"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-13" date="1373544000">- rebuild with ? in dist
- Resolves: rhbz#983255</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-14" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-15" date="1389009600">- remove old changelogs
- ppc fail to rebuild package
- Resolves: rhbz#1048745</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-16" date="1389268800">- the correct solution is remove smp_flags, they don't work properly on ppc with
  the option mpower7
- Related: rhbz#1048745</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-18" date="1412337600">- filter environment variables not acceptable in bash input</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-20" date="1434974400">- build the package with hardening flags (PIE, full RELRO)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-21" date="1461153600">- correct the DST correction when using UTC time specification (#1328832)
- clear non-job files from at dir and test for write error on fclose
  to fix bogus syslog messages</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22" date="1464004800">- SIGPIPE should not be ignored in atd (#1338039)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22.2" date="1513771200">- fix handling of the aborted jobs (due to possibly
  temporary conditions) and avoid flooding the syslog</changelog>
</package>
<package pkgid="72409cc57ba8dfeabeba9cbc8210a6392e3ee291565deb68522ef8c84449caa7" name="at" arch="src">
  <version epoch="0" ver="3.1.13" rel="22.el7_4.2"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-13" date="1373544000">- rebuild with ? in dist
- Resolves: rhbz#983255</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-14" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-15" date="1389009600">- remove old changelogs
- ppc fail to rebuild package
- Resolves: rhbz#1048745</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-16" date="1389268800">- the correct solution is remove smp_flags, they don't work properly on ppc with
  the option mpower7
- Related: rhbz#1048745</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-18" date="1412337600">- filter environment variables not acceptable in bash input</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-20" date="1434974400">- build the package with hardening flags (PIE, full RELRO)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-21" date="1461153600">- correct the DST correction when using UTC time specification (#1328832)
- clear non-job files from at dir and test for write error on fclose
  to fix bogus syslog messages</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22" date="1464004800">- SIGPIPE should not be ignored in atd (#1338039)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22.2" date="1513771200">- fix handling of the aborted jobs (due to possibly
  temporary conditions) and avoid flooding the syslog</changelog>
</package>
<package pkgid="7b0cff237018e2bdb3bd08ffaef0779be99a8346e11b0875e6e85cf202711076" name="at" arch="src">
  <version epoch="0" ver="3.1.13" rel="22.el7_4.2"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-13" date="1373544000">- rebuild with ? in dist
- Resolves: rhbz#983255</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-14" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-15" date="1389009600">- remove old changelogs
- ppc fail to rebuild package
- Resolves: rhbz#1048745</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-16" date="1389268800">- the correct solution is remove smp_flags, they don't work properly on ppc with
  the option mpower7
- Related: rhbz#1048745</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-18" date="1412337600">- filter environment variables not acceptable in bash input</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-20" date="1434974400">- build the package with hardening flags (PIE, full RELRO)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-21" date="1461153600">- correct the DST correction when using UTC time specification (#1328832)
- clear non-job files from at dir and test for write error on fclose
  to fix bogus syslog messages</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22" date="1464004800">- SIGPIPE should not be ignored in atd (#1338039)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22.2" date="1513771200">- fix handling of the aborted jobs (due to possibly
  temporary conditions) and avoid flooding the syslog</changelog>
</package>
<package pkgid="bf238abe3804ca828df3e3e9b01f8c0f7adf0da4209de87ca2ad71eed70eb3a9" name="at" arch="x86_64">
  <version epoch="0" ver="3.1.13" rel="22.el7_4.2"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-13" date="1373544000">- rebuild with ? in dist
- Resolves: rhbz#983255</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-14" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-15" date="1389009600">- remove old changelogs
- ppc fail to rebuild package
- Resolves: rhbz#1048745</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-16" date="1389268800">- the correct solution is remove smp_flags, they don't work properly on ppc with
  the option mpower7
- Related: rhbz#1048745</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-18" date="1412337600">- filter environment variables not acceptable in bash input</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-20" date="1434974400">- build the package with hardening flags (PIE, full RELRO)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-21" date="1461153600">- correct the DST correction when using UTC time specification (#1328832)
- clear non-job files from at dir and test for write error on fclose
  to fix bogus syslog messages</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22" date="1464004800">- SIGPIPE should not be ignored in atd (#1338039)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22.2" date="1513771200">- fix handling of the aborted jobs (due to possibly
  temporary conditions) and avoid flooding the syslog</changelog>
</package>
<package pkgid="fc31dcac28766d57672af7d3ab107bb823d6e61048429e6543d2e322538392f4" name="at-debuginfo" arch="i686">
  <version epoch="0" ver="3.1.13" rel="22.el7_4.2"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-13" date="1373544000">- rebuild with ? in dist
- Resolves: rhbz#983255</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-14" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-15" date="1389009600">- remove old changelogs
- ppc fail to rebuild package
- Resolves: rhbz#1048745</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-16" date="1389268800">- the correct solution is remove smp_flags, they don't work properly on ppc with
  the option mpower7
- Related: rhbz#1048745</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-18" date="1412337600">- filter environment variables not acceptable in bash input</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-20" date="1434974400">- build the package with hardening flags (PIE, full RELRO)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-21" date="1461153600">- correct the DST correction when using UTC time specification (#1328832)
- clear non-job files from at dir and test for write error on fclose
  to fix bogus syslog messages</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22" date="1464004800">- SIGPIPE should not be ignored in atd (#1338039)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22.2" date="1513771200">- fix handling of the aborted jobs (due to possibly
  temporary conditions) and avoid flooding the syslog</changelog>
</package>
<package pkgid="fdac42a50004afb7976dfb819ba3218c1752adec6627eb75666feb859aeecaef" name="at-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1.13" rel="22.el7_4.2"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-13" date="1373544000">- rebuild with ? in dist
- Resolves: rhbz#983255</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-14" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-15" date="1389009600">- remove old changelogs
- ppc fail to rebuild package
- Resolves: rhbz#1048745</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-16" date="1389268800">- the correct solution is remove smp_flags, they don't work properly on ppc with
  the option mpower7
- Related: rhbz#1048745</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-18" date="1412337600">- filter environment variables not acceptable in bash input</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-20" date="1434974400">- build the package with hardening flags (PIE, full RELRO)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-21" date="1461153600">- correct the DST correction when using UTC time specification (#1328832)
- clear non-job files from at dir and test for write error on fclose
  to fix bogus syslog messages</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22" date="1464004800">- SIGPIPE should not be ignored in atd (#1338039)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22.2" date="1513771200">- fix handling of the aborted jobs (due to possibly
  temporary conditions) and avoid flooding the syslog</changelog>
</package>
<package pkgid="1e98d3937894167ff759f6c78c5dd8f073b00eefefe90e5ac94b2d5fe4ff28e9" name="at-sysvinit" arch="i686">
  <version epoch="0" ver="3.1.13" rel="22.el7_4.2"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-13" date="1373544000">- rebuild with ? in dist
- Resolves: rhbz#983255</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-14" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-15" date="1389009600">- remove old changelogs
- ppc fail to rebuild package
- Resolves: rhbz#1048745</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-16" date="1389268800">- the correct solution is remove smp_flags, they don't work properly on ppc with
  the option mpower7
- Related: rhbz#1048745</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-18" date="1412337600">- filter environment variables not acceptable in bash input</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-20" date="1434974400">- build the package with hardening flags (PIE, full RELRO)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-21" date="1461153600">- correct the DST correction when using UTC time specification (#1328832)
- clear non-job files from at dir and test for write error on fclose
  to fix bogus syslog messages</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22" date="1464004800">- SIGPIPE should not be ignored in atd (#1338039)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22.2" date="1513771200">- fix handling of the aborted jobs (due to possibly
  temporary conditions) and avoid flooding the syslog</changelog>
</package>
<package pkgid="89830c9655290c76de4c9428696218a8a29dca2cec3c7a1b020c72a99b505165" name="at-sysvinit" arch="x86_64">
  <version epoch="0" ver="3.1.13" rel="22.el7_4.2"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-13" date="1373544000">- rebuild with ? in dist
- Resolves: rhbz#983255</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-14" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-15" date="1389009600">- remove old changelogs
- ppc fail to rebuild package
- Resolves: rhbz#1048745</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-16" date="1389268800">- the correct solution is remove smp_flags, they don't work properly on ppc with
  the option mpower7
- Related: rhbz#1048745</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-18" date="1412337600">- filter environment variables not acceptable in bash input</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-20" date="1434974400">- build the package with hardening flags (PIE, full RELRO)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-21" date="1461153600">- correct the DST correction when using UTC time specification (#1328832)
- clear non-job files from at dir and test for write error on fclose
  to fix bogus syslog messages</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22" date="1464004800">- SIGPIPE should not be ignored in atd (#1338039)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22.2" date="1513771200">- fix handling of the aborted jobs (due to possibly
  temporary conditions) and avoid flooding the syslog</changelog>
</package>
<package pkgid="78167cbd297a1b393a4f39e180726b52491c742a9de5bb247d3eef0292e6cee4" name="augeas" arch="i686">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-11" date="1392897600">- Add patch for Yum, split exclude lines (RHBZ#1067039)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
</package>
<package pkgid="1b40f3c847b2c8e18b315dbf130144ab1bf12588b297fdf0c4ce83154383c2ca" name="augeas" arch="src">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-11" date="1392897600">- Add patch for Yum, split exclude lines (RHBZ#1067039)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
</package>
<package pkgid="e94d779b9472b1e8971d0c9ab8e6763afa83d45ff729fc039b531facc8258c6e" name="augeas" arch="src">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-11" date="1392897600">- Add patch for Yum, split exclude lines (RHBZ#1067039)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
</package>
<package pkgid="abbd4dec8e231624813f5d8ad68aafdfa78121b577cf42525a1d2cd201e33678" name="augeas" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-11" date="1392897600">- Add patch for Yum, split exclude lines (RHBZ#1067039)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
</package>
<package pkgid="4a88d742fdf5da5c5e3211f0f2721249187deecb851d549d6fa7af0167f104fb" name="augeas" arch="i686">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.2"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.2" date="1505995200">- Sudoers: recognize "match_group_by_gid" (RHBZ#1493005)</changelog>
</package>
<package pkgid="28d9a2e55d77dfc86608a951dbe674f9fb4daa634b38c3b24903b277158d1c04" name="augeas" arch="src">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.2"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.2" date="1505995200">- Sudoers: recognize "match_group_by_gid" (RHBZ#1493005)</changelog>
</package>
<package pkgid="06c6fbf1e84fe4ba36e2df94e52d48d24264553ba245e635b1042209cd41c6c6" name="augeas" arch="src">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.2"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.2" date="1505995200">- Sudoers: recognize "match_group_by_gid" (RHBZ#1493005)</changelog>
</package>
<package pkgid="4277bc53e05ce1acb4de60ec04d2f0b409c239265290655d9485169f82965842" name="augeas" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.2"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.2" date="1505995200">- Sudoers: recognize "match_group_by_gid" (RHBZ#1493005)</changelog>
</package>
<package pkgid="5e3fac34439d1e030d7d81c4853a0d76c8be4f0414cad3736b865199446b31d0" name="augeas-debuginfo" arch="i686">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-11" date="1392897600">- Add patch for Yum, split exclude lines (RHBZ#1067039)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
</package>
<package pkgid="bad8f2d93bb7663aea74917053bc6cc7c508ab7bdbbd960d80eb82fafe663390" name="augeas-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-11" date="1392897600">- Add patch for Yum, split exclude lines (RHBZ#1067039)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
</package>
<package pkgid="98b6838c368709a051a547e972b21cd976f52ab965cc715bb38d022148c2778a" name="augeas-debuginfo" arch="i686">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.2"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.2" date="1505995200">- Sudoers: recognize "match_group_by_gid" (RHBZ#1493005)</changelog>
</package>
<package pkgid="d5fa78fb9c3bb0df750c7a519b636be412188c53cb6dae8b095251943f3ffcb3" name="augeas-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.2"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.2" date="1505995200">- Sudoers: recognize "match_group_by_gid" (RHBZ#1493005)</changelog>
</package>
<package pkgid="4b8ef545463e828c28f809859e527e68648cb45d7c0c2509f8687d47758335f6" name="augeas-devel" arch="i686">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-11" date="1392897600">- Add patch for Yum, split exclude lines (RHBZ#1067039)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
</package>
<package pkgid="ac401bc31dc62ed4a85e66ffccc0978f2a8c47cfa8475609f51ac1e45310ebb4" name="augeas-devel" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-11" date="1392897600">- Add patch for Yum, split exclude lines (RHBZ#1067039)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
</package>
<package pkgid="ffd2a62b4088cce3124db30d083168bce8eba20a46f70d3a4c6da30e0e36e63a" name="augeas-devel" arch="i686">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.2"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.2" date="1505995200">- Sudoers: recognize "match_group_by_gid" (RHBZ#1493005)</changelog>
</package>
<package pkgid="8dd7cfe8c1960b06f1d3b9819ffe9b600145c457d5e9dca0051f7a7cc404557a" name="augeas-devel" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.2"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.2" date="1505995200">- Sudoers: recognize "match_group_by_gid" (RHBZ#1493005)</changelog>
</package>
<package pkgid="1fe1ec6c7fa743284dbdb341403c7d0d9c0ba1318c54cf2bd7bf3f2dd147f83b" name="augeas-libs" arch="i686">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-11" date="1392897600">- Add patch for Yum, split exclude lines (RHBZ#1067039)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
</package>
<package pkgid="fdfd8a976ecc804f903a2e62509289dcc4f4729f90a23a9b3062f512802f155d" name="augeas-libs" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-11" date="1392897600">- Add patch for Yum, split exclude lines (RHBZ#1067039)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
</package>
<package pkgid="76b7b502ade10307ff9aa019a9a052e4e9f1d913d210a9fd589f8b8c2e068307" name="augeas-libs" arch="i686">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.2"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.2" date="1505995200">- Sudoers: recognize "match_group_by_gid" (RHBZ#1493005)</changelog>
</package>
<package pkgid="ef5a3e5129555fb0737fea7f12ea8f76e1ec4537207eb55bc07e1e10a9187c2d" name="augeas-libs" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.2"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.2" date="1505995200">- Sudoers: recognize "match_group_by_gid" (RHBZ#1493005)</changelog>
</package>
<package pkgid="147d9f44c816ca318a8f4845578485543fbad8d4f29d0146384fdd96e8d14e67" name="autocorr-af" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="3deca88fbd1bb51033405892320785e631fac5c8c8bf018a24dec199f90dac87" name="autocorr-af" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="a29f08ad7ee0b7e0af3c33b02e554157fabc0b42c837f157d82953efffdc9c65" name="autocorr-bg" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="2046ebdf0e0031fbb11bbbe1de8adecebd85fa3a7126e485da6d91e25365c91d" name="autocorr-bg" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="4de8ed985d4f54a32b4f1cf33f64b7c3f58faa8f4efc72473dd82350caa288d0" name="autocorr-ca" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="da0fe26bd6ba7918953ebcf6dec501868238979e08c719f233311677d56dceac" name="autocorr-ca" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="4279c7747f3a19b8c7738f0ca44173a7f517198c9f6bd8bd25eb1ca2afc2ee50" name="autocorr-cs" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="db0e236288722a5ce4d4812022cf7174c4f45ba3e957051c598f574bab1fe225" name="autocorr-cs" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="7c51bb683c77e09e4223046a9cdc6bbfd9bd7f26ae69032f99f21c040f505c40" name="autocorr-da" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="a892554fe09769fb282be840096f16978c85740ca4cef96a741f43ce6521beae" name="autocorr-da" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="152f4022183da44d44d760329133c33c96c3451ed47ac84227616ac21943f8f3" name="autocorr-de" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="5aa94b6a87b5dc313b2635559050e673b9760f4891260b58d148b9196b134357" name="autocorr-de" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="6a4c2daf0ba1426120f3a346ce32f393b2672931549b5e8858f99f35123f13c3" name="autocorr-en" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="d61058ddbc3101f7b628a82219ed3daf19601cc515a28e2079f653a812b229d4" name="autocorr-en" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="0f81e066c51f43d56a003a2a9efc654f15cceb6ad36cd11fdf60e0bfd2005346" name="autocorr-es" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="a3d27acf0b9e1041bcd5d82030e623a5f7ab37708bd142898c6cd8a8c9504292" name="autocorr-es" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="553924bae6351c8088041f0c72e2ac88bd022bcd15331ee02b1184c9ac34d6f0" name="autocorr-fa" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="cc601b88839190651578c9c5ee10df80949f291e6c788f3efb9ba5f56304f130" name="autocorr-fa" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="ce91aa166d8eeec3c5f74fd630de7c29840036bb8b0c3696ca98babff84fe7dd" name="autocorr-fi" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="961522cb56fe182f52b1b079941eb33ca202099521e5aa4bd578cbbc9ce4f214" name="autocorr-fi" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="5b655e6d92346117a55bf9072ea2f2f4874ad8118917e5b1102d3d1ac43059b3" name="autocorr-fr" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="1bb80d16432a49eaa66257f40a47f7107f27f9b5759554edd09333d54f23f468" name="autocorr-fr" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="c383d052f969c0bdb2532db15d1a6a8269fae30e5221020a75b0f8bd275a6d29" name="autocorr-ga" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="0a20c99a1ef9056a5746b8681edca494c99da8b624b6c073e4e257e79f7af8a0" name="autocorr-ga" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="6ac39fe64187ee5864bdce78985a9fbb1d0a00e6b6176012cf9eb22613d071a9" name="autocorr-hr" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="78ace63b9020a388417370d182a09f2f5a828ea150c302854eac2385f9e8d55f" name="autocorr-hr" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="2fbb5e296994708e662097acd767cab69b4755a24637ae25ed8762c3d657ae0c" name="autocorr-hu" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="bf3388df30c8e81d206129bbfed0c2de6eb9145845d6df28a6771ed03f43b58d" name="autocorr-hu" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="970df270bef706c308239b79892dc61f88e7f74674f8b0cf149e9ab14d9209cc" name="autocorr-is" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="a0ca6a9ee3db999a9788dc374664d0e6bc4aa0d7e6805234b14f34124e0de248" name="autocorr-is" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="1aed5546e182efac91a320b46371cb16fb6a4b6a5df89bf85a6b4293406c7e4e" name="autocorr-it" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="2f726d0ad0e99b8cf76b5ac641467006c43502ae31898ae8ba3c660d8e28af37" name="autocorr-it" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="570df3973386e0cdc4e297aae47d81979f8d245b7a1c327fce59429db13800a9" name="autocorr-ja" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="4a9e3e8a306b9e7fc5c8e7479480e297cfc9f8a5dc30e4026768bcf78533d474" name="autocorr-ja" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="512f9f207ee0aed7dd87bbc8bf28efdbe721f1c63bf025e4324cf7160c205107" name="autocorr-ko" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="6cdb54b52b4ef9f88dc45c0ea3f9318a0c1bb6b2b3439b4363603b354cd0e571" name="autocorr-ko" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="8aa4340a05466db3746ffd9f5af3f316622c750f5255bcb332c8e004463ad56d" name="autocorr-lb" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="ae720a547d2013026b03e7d13593d3c71fb0fc15b0e21f398c4a38f46080ba67" name="autocorr-lb" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="3bf1a71a38ceddc87391fdae92c89962803420c187b7dc91ec8eb1d7fed10f3c" name="autocorr-lt" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="d90e96d46f6ffbcf9bd39720306b7c0a64f6810f823aecaa6f95afbd53bf0bc3" name="autocorr-lt" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="42256219bdea98458666fd2a08b16c620d8c2e0562339eefe8df3d88e283a009" name="autocorr-mn" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="dd276dad65aad2b52c28aa0e40506ba30ae41503a6220c2ae2b9f6d475a7073e" name="autocorr-mn" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="dccda7491a0a4a7d0eacd34c265c9bf6aa2e185bb677d270db60918a1721912f" name="autocorr-nl" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="1d5f1cbcbf85bc74d86ec6c369cbab3955fc4afe2aeaafd43069dd444d99bde8" name="autocorr-nl" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="9cc0075c9150c002007b9d43ba718c37282176db3959288e20d5948ea6d6ddd7" name="autocorr-pl" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="8e34e97d61c7b9f559d38aeda6689f073b95b9dc2a4b3dcbda63ff1c871880a2" name="autocorr-pl" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="f66ca5477e61bd7380dbe88705df3158e0f0ee4d77193db1e823640c5c45e0df" name="autocorr-pt" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="e5097118b407087620b08107301a046b864cde6e39dbc6c62f73066760417012" name="autocorr-pt" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="1fe08bacc3f1d3d39427f38ff39fd26d2552b52f9f06737375c865c096bbe783" name="autocorr-ro" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="fb1bc7338c2b4608c18b6e8ab94ce6728921b762d6e4e8445e6201934f29abda" name="autocorr-ro" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="c528690c46dc020ce614612bd5f6d0c10a35d8c7245bfa4334687def34e5d727" name="autocorr-ru" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="dcd0056fcd35bc180e62bfe98a9c0c5b75b2e6d15f2af45fa38461d043af0221" name="autocorr-ru" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="e861badd4f71f9cb53ab7014b99002c33613bb45d4807757675e307798c0f693" name="autocorr-sk" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="c91d30a8c61d59cfcd8c6aad07fc4900fd7c567d5d432a203d50f178176b630d" name="autocorr-sk" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="465230763a9c0e9e907dac751c2a2bc2f7b801f4aed751f8b2b92e01697c00cf" name="autocorr-sl" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="0eac1cc1b621cdf0f4fa4685933a26a34d992b24b8304c0d90664a39b0203a4f" name="autocorr-sl" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="7ce03ef3397e60c6cc21757346b5ee0872540d395fdf17a4cec156e275acebb6" name="autocorr-sr" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="ed6d6d8c224f339277bfb5c2f057f83774cee242ec7bf5f06cd1c7f2f8eb3040" name="autocorr-sr" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="67bf4622f7437490a8e67aa3e1364788c858e7c1c7a3bd1176306c6d66af0741" name="autocorr-sv" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="399d6f7a351e0ac279f1dfe7f4d10119b84104565d3862d4ede14f2c92e38a5b" name="autocorr-sv" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="612be9750b3681ac6cb8bf5a2a09e976fc4de985084dd256dc09f1c3ddfae156" name="autocorr-tr" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="5c916ab179d25a6f6422ba44388ec081c70179eeb3fa23c010c9bdcd6342a72d" name="autocorr-tr" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="b4accc5464485a36071319bebb011a9cda1401c78182b4fe9e1678631cbc9ada" name="autocorr-vi" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="fe6c1ca1cc75ed3cdffd898a815ba6b0d55586a77f35b06f7d5822ba92af9082" name="autocorr-vi" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="8cee656e40328b31bb0924a5e5bdb2d7aa77609a7209ab7c679d60ab842b6d51" name="autocorr-zh" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="7e55da856bba1968d477fa95cf68de7988ac8c97172b5b5b8d62a0c97572df68" name="autocorr-zh" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="1a7921af5059e9ea21cd79efcd9ad7f7000c0580f3d0c59756176232d8170514" name="autofs" arch="i686">
  <version epoch="1" ver="5.0.7" rel="70.el7_4.1"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-61" date="1490011200">- bz1101782 - autofs configured with sssd is not finding any maps
  - work around sss startup delay.
  - add sss master map wait config option (wait initially 0, disabled).
- Resolves: rhbz#1101782</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-62" date="1490616000">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - use autofs_point to store expire timeout where possibe.
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-63" date="1490875200">- bz1101782 - autofs configured with sssd is not finding any maps
  - fix work around sss startup delay.
- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix possible NULL derefernce.
- Related: rhbz#1101782 rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-64" date="1492430400">- bz1440769 - autofs is facing scalability issues
  - improve scalability of direct mount path component creation.
- Resolves: rhbz#1440769</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-65" date="1493035200">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix invalid reference in remount_active_mount().
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-66" date="1493985600">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - increase worker thread per-thread stack size.
  - limit getgrgid_r() buffer size.
  - add congigure option for limiting getgrgid_r() stack usage.
  - use above option to limit getgrgid_r() stack usage with configure.
- Resolves: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-68" date="1496404800">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix unset tsd group name handling.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-69" date="1496404801">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix a couple of covarity warning resulting in group name handling change.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-70.el7_4" date="1508414400">- bz1503945 - autofs option parsing for maps with fstype=autofs no longer
  works [rhel-7.4.z]
  - revert fix argc off by one in mount_autofs.c.
- bz1503946 - autofs map entry options field does not accept dot character
  [rhel-7.4.z]
  - allow dot in OPTIONSTR value lexer pattern.
  - handle additional nfs versions in mount_nfs.c.
- Resolves: rhbz#1503945 rhbz#1503946</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-70.el7_4.1" date="1508414401">- bz1515311 - Automount cannot access host shares after a reboot [rhel-7.4.z]
  - reset master map list on startup retry.
- Resolves: rhbz#1515311</changelog>
</package>
<package pkgid="72ba36ffcb7b626acff8a182acb770e9d429233b640a00da2516db35382b2e3d" name="autofs" arch="src">
  <version epoch="1" ver="5.0.7" rel="70.el7_4.1"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-61" date="1490011200">- bz1101782 - autofs configured with sssd is not finding any maps
  - work around sss startup delay.
  - add sss master map wait config option (wait initially 0, disabled).
- Resolves: rhbz#1101782</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-62" date="1490616000">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - use autofs_point to store expire timeout where possibe.
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-63" date="1490875200">- bz1101782 - autofs configured with sssd is not finding any maps
  - fix work around sss startup delay.
- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix possible NULL derefernce.
- Related: rhbz#1101782 rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-64" date="1492430400">- bz1440769 - autofs is facing scalability issues
  - improve scalability of direct mount path component creation.
- Resolves: rhbz#1440769</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-65" date="1493035200">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix invalid reference in remount_active_mount().
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-66" date="1493985600">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - increase worker thread per-thread stack size.
  - limit getgrgid_r() buffer size.
  - add congigure option for limiting getgrgid_r() stack usage.
  - use above option to limit getgrgid_r() stack usage with configure.
- Resolves: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-68" date="1496404800">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix unset tsd group name handling.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-69" date="1496404801">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix a couple of covarity warning resulting in group name handling change.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-70.el7_4" date="1508414400">- bz1503945 - autofs option parsing for maps with fstype=autofs no longer
  works [rhel-7.4.z]
  - revert fix argc off by one in mount_autofs.c.
- bz1503946 - autofs map entry options field does not accept dot character
  [rhel-7.4.z]
  - allow dot in OPTIONSTR value lexer pattern.
  - handle additional nfs versions in mount_nfs.c.
- Resolves: rhbz#1503945 rhbz#1503946</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-70.el7_4.1" date="1508414401">- bz1515311 - Automount cannot access host shares after a reboot [rhel-7.4.z]
  - reset master map list on startup retry.
- Resolves: rhbz#1515311</changelog>
</package>
<package pkgid="a4a52431e472f176d79188930b6bd120be27fc5fde12b4e1396e480247be9766" name="autofs" arch="src">
  <version epoch="1" ver="5.0.7" rel="70.el7_4.1"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-61" date="1490011200">- bz1101782 - autofs configured with sssd is not finding any maps
  - work around sss startup delay.
  - add sss master map wait config option (wait initially 0, disabled).
- Resolves: rhbz#1101782</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-62" date="1490616000">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - use autofs_point to store expire timeout where possibe.
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-63" date="1490875200">- bz1101782 - autofs configured with sssd is not finding any maps
  - fix work around sss startup delay.
- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix possible NULL derefernce.
- Related: rhbz#1101782 rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-64" date="1492430400">- bz1440769 - autofs is facing scalability issues
  - improve scalability of direct mount path component creation.
- Resolves: rhbz#1440769</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-65" date="1493035200">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix invalid reference in remount_active_mount().
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-66" date="1493985600">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - increase worker thread per-thread stack size.
  - limit getgrgid_r() buffer size.
  - add congigure option for limiting getgrgid_r() stack usage.
  - use above option to limit getgrgid_r() stack usage with configure.
- Resolves: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-68" date="1496404800">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix unset tsd group name handling.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-69" date="1496404801">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix a couple of covarity warning resulting in group name handling change.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-70.el7_4" date="1508414400">- bz1503945 - autofs option parsing for maps with fstype=autofs no longer
  works [rhel-7.4.z]
  - revert fix argc off by one in mount_autofs.c.
- bz1503946 - autofs map entry options field does not accept dot character
  [rhel-7.4.z]
  - allow dot in OPTIONSTR value lexer pattern.
  - handle additional nfs versions in mount_nfs.c.
- Resolves: rhbz#1503945 rhbz#1503946</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-70.el7_4.1" date="1508414401">- bz1515311 - Automount cannot access host shares after a reboot [rhel-7.4.z]
  - reset master map list on startup retry.
- Resolves: rhbz#1515311</changelog>
</package>
<package pkgid="4a2c7611bf0f2ea7a185cb1e102d53a6417760d3502b92a4d8a92502105d93fc" name="autofs" arch="x86_64">
  <version epoch="1" ver="5.0.7" rel="70.el7_4.1"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-61" date="1490011200">- bz1101782 - autofs configured with sssd is not finding any maps
  - work around sss startup delay.
  - add sss master map wait config option (wait initially 0, disabled).
- Resolves: rhbz#1101782</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-62" date="1490616000">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - use autofs_point to store expire timeout where possibe.
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-63" date="1490875200">- bz1101782 - autofs configured with sssd is not finding any maps
  - fix work around sss startup delay.
- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix possible NULL derefernce.
- Related: rhbz#1101782 rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-64" date="1492430400">- bz1440769 - autofs is facing scalability issues
  - improve scalability of direct mount path component creation.
- Resolves: rhbz#1440769</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-65" date="1493035200">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix invalid reference in remount_active_mount().
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-66" date="1493985600">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - increase worker thread per-thread stack size.
  - limit getgrgid_r() buffer size.
  - add congigure option for limiting getgrgid_r() stack usage.
  - use above option to limit getgrgid_r() stack usage with configure.
- Resolves: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-68" date="1496404800">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix unset tsd group name handling.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-69" date="1496404801">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix a couple of covarity warning resulting in group name handling change.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-70.el7_4" date="1508414400">- bz1503945 - autofs option parsing for maps with fstype=autofs no longer
  works [rhel-7.4.z]
  - revert fix argc off by one in mount_autofs.c.
- bz1503946 - autofs map entry options field does not accept dot character
  [rhel-7.4.z]
  - allow dot in OPTIONSTR value lexer pattern.
  - handle additional nfs versions in mount_nfs.c.
- Resolves: rhbz#1503945 rhbz#1503946</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-70.el7_4.1" date="1508414401">- bz1515311 - Automount cannot access host shares after a reboot [rhel-7.4.z]
  - reset master map list on startup retry.
- Resolves: rhbz#1515311</changelog>
</package>
<package pkgid="81c9f495fb9d93f36beed612fe8b2fc318697eb96f61284e693e2c1d4bcf2cb1" name="autofs" arch="i686">
  <version epoch="1" ver="5.0.7" rel="70.el7_4"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-60" date="1490011200">- bz1382093 - Improve logging in autofs
   - add the mount requestor's pid to pending_args.
   - create thread-local ID for mount attempts.
   - log functions to prefix messages with attempt_id if available.
   - factor out set_thread_mount_request_log_id().
   - add config option to use mount request log id.
- Resolves: rhbz#1382093</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-61" date="1490011201">- bz1101782 - autofs configured with sssd is not finding any maps
  - work around sss startup delay.
  - add sss master map wait config option (wait initially 0, disabled).
- Resolves: rhbz#1101782</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-62" date="1490616000">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - use autofs_point to store expire timeout where possibe.
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-63" date="1490875200">- bz1101782 - autofs configured with sssd is not finding any maps
  - fix work around sss startup delay.
- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix possible NULL derefernce.
- Related: rhbz#1101782 rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-64" date="1492430400">- bz1440769 - autofs is facing scalability issues
  - improve scalability of direct mount path component creation.
- Resolves: rhbz#1440769</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-65" date="1493035200">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix invalid reference in remount_active_mount().
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-66" date="1493985600">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - increase worker thread per-thread stack size.
  - limit getgrgid_r() buffer size.
  - add congigure option for limiting getgrgid_r() stack usage.
  - use above option to limit getgrgid_r() stack usage with configure.
- Resolves: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-68" date="1496404800">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix unset tsd group name handling.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-69" date="1496404801">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix a couple of covarity warning resulting in group name handling change.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-70.el7_4" date="1508414400">- bz1503945 - autofs option parsing for maps with fstype=autofs no longer
  works [rhel-7.4.z]
  - revert fix argc off by one in mount_autofs.c.
- bz1503946 - autofs map entry options field does not accept dot character
  [rhel-7.4.z]
  - allow dot in OPTIONSTR value lexer pattern.
  - handle additional nfs versions in mount_nfs.c.
- Resolves: rhbz#1503945 rhbz#1503946</changelog>
</package>
<package pkgid="085555f2b6951839740762d7e54d41009d2abcef4b235add00cfbbef0d09f5d9" name="autofs" arch="src">
  <version epoch="1" ver="5.0.7" rel="70.el7_4"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-60" date="1490011200">- bz1382093 - Improve logging in autofs
   - add the mount requestor's pid to pending_args.
   - create thread-local ID for mount attempts.
   - log functions to prefix messages with attempt_id if available.
   - factor out set_thread_mount_request_log_id().
   - add config option to use mount request log id.
- Resolves: rhbz#1382093</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-61" date="1490011201">- bz1101782 - autofs configured with sssd is not finding any maps
  - work around sss startup delay.
  - add sss master map wait config option (wait initially 0, disabled).
- Resolves: rhbz#1101782</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-62" date="1490616000">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - use autofs_point to store expire timeout where possibe.
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-63" date="1490875200">- bz1101782 - autofs configured with sssd is not finding any maps
  - fix work around sss startup delay.
- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix possible NULL derefernce.
- Related: rhbz#1101782 rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-64" date="1492430400">- bz1440769 - autofs is facing scalability issues
  - improve scalability of direct mount path component creation.
- Resolves: rhbz#1440769</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-65" date="1493035200">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix invalid reference in remount_active_mount().
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-66" date="1493985600">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - increase worker thread per-thread stack size.
  - limit getgrgid_r() buffer size.
  - add congigure option for limiting getgrgid_r() stack usage.
  - use above option to limit getgrgid_r() stack usage with configure.
- Resolves: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-68" date="1496404800">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix unset tsd group name handling.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-69" date="1496404801">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix a couple of covarity warning resulting in group name handling change.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-70.el7_4" date="1508414400">- bz1503945 - autofs option parsing for maps with fstype=autofs no longer
  works [rhel-7.4.z]
  - revert fix argc off by one in mount_autofs.c.
- bz1503946 - autofs map entry options field does not accept dot character
  [rhel-7.4.z]
  - allow dot in OPTIONSTR value lexer pattern.
  - handle additional nfs versions in mount_nfs.c.
- Resolves: rhbz#1503945 rhbz#1503946</changelog>
</package>
<package pkgid="d9a8511694f102a46d7f633a1621e53cd1cf721b00f1e88a368cd47c2719734e" name="autofs" arch="src">
  <version epoch="1" ver="5.0.7" rel="70.el7_4"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-60" date="1490011200">- bz1382093 - Improve logging in autofs
   - add the mount requestor's pid to pending_args.
   - create thread-local ID for mount attempts.
   - log functions to prefix messages with attempt_id if available.
   - factor out set_thread_mount_request_log_id().
   - add config option to use mount request log id.
- Resolves: rhbz#1382093</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-61" date="1490011201">- bz1101782 - autofs configured with sssd is not finding any maps
  - work around sss startup delay.
  - add sss master map wait config option (wait initially 0, disabled).
- Resolves: rhbz#1101782</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-62" date="1490616000">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - use autofs_point to store expire timeout where possibe.
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-63" date="1490875200">- bz1101782 - autofs configured with sssd is not finding any maps
  - fix work around sss startup delay.
- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix possible NULL derefernce.
- Related: rhbz#1101782 rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-64" date="1492430400">- bz1440769 - autofs is facing scalability issues
  - improve scalability of direct mount path component creation.
- Resolves: rhbz#1440769</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-65" date="1493035200">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix invalid reference in remount_active_mount().
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-66" date="1493985600">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - increase worker thread per-thread stack size.
  - limit getgrgid_r() buffer size.
  - add congigure option for limiting getgrgid_r() stack usage.
  - use above option to limit getgrgid_r() stack usage with configure.
- Resolves: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-68" date="1496404800">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix unset tsd group name handling.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-69" date="1496404801">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix a couple of covarity warning resulting in group name handling change.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-70.el7_4" date="1508414400">- bz1503945 - autofs option parsing for maps with fstype=autofs no longer
  works [rhel-7.4.z]
  - revert fix argc off by one in mount_autofs.c.
- bz1503946 - autofs map entry options field does not accept dot character
  [rhel-7.4.z]
  - allow dot in OPTIONSTR value lexer pattern.
  - handle additional nfs versions in mount_nfs.c.
- Resolves: rhbz#1503945 rhbz#1503946</changelog>
</package>
<package pkgid="37b9c8e7a63e59598bfa6e0f1f3a80812d7d51cc209d713adbdfa5676a457e9a" name="autofs" arch="x86_64">
  <version epoch="1" ver="5.0.7" rel="70.el7_4"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-60" date="1490011200">- bz1382093 - Improve logging in autofs
   - add the mount requestor's pid to pending_args.
   - create thread-local ID for mount attempts.
   - log functions to prefix messages with attempt_id if available.
   - factor out set_thread_mount_request_log_id().
   - add config option to use mount request log id.
- Resolves: rhbz#1382093</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-61" date="1490011201">- bz1101782 - autofs configured with sssd is not finding any maps
  - work around sss startup delay.
  - add sss master map wait config option (wait initially 0, disabled).
- Resolves: rhbz#1101782</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-62" date="1490616000">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - use autofs_point to store expire timeout where possibe.
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-63" date="1490875200">- bz1101782 - autofs configured with sssd is not finding any maps
  - fix work around sss startup delay.
- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix possible NULL derefernce.
- Related: rhbz#1101782 rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-64" date="1492430400">- bz1440769 - autofs is facing scalability issues
  - improve scalability of direct mount path component creation.
- Resolves: rhbz#1440769</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-65" date="1493035200">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix invalid reference in remount_active_mount().
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-66" date="1493985600">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - increase worker thread per-thread stack size.
  - limit getgrgid_r() buffer size.
  - add congigure option for limiting getgrgid_r() stack usage.
  - use above option to limit getgrgid_r() stack usage with configure.
- Resolves: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-68" date="1496404800">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix unset tsd group name handling.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-69" date="1496404801">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix a couple of covarity warning resulting in group name handling change.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-70.el7_4" date="1508414400">- bz1503945 - autofs option parsing for maps with fstype=autofs no longer
  works [rhel-7.4.z]
  - revert fix argc off by one in mount_autofs.c.
- bz1503946 - autofs map entry options field does not accept dot character
  [rhel-7.4.z]
  - allow dot in OPTIONSTR value lexer pattern.
  - handle additional nfs versions in mount_nfs.c.
- Resolves: rhbz#1503945 rhbz#1503946</changelog>
</package>
<package pkgid="1f93afa190d1a640f6b4cc164850ba74c4aa0f59000f763de7fba6fcf9290241" name="autofs-debuginfo" arch="i686">
  <version epoch="1" ver="5.0.7" rel="70.el7_4.1"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-61" date="1490011200">- bz1101782 - autofs configured with sssd is not finding any maps
  - work around sss startup delay.
  - add sss master map wait config option (wait initially 0, disabled).
- Resolves: rhbz#1101782</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-62" date="1490616000">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - use autofs_point to store expire timeout where possibe.
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-63" date="1490875200">- bz1101782 - autofs configured with sssd is not finding any maps
  - fix work around sss startup delay.
- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix possible NULL derefernce.
- Related: rhbz#1101782 rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-64" date="1492430400">- bz1440769 - autofs is facing scalability issues
  - improve scalability of direct mount path component creation.
- Resolves: rhbz#1440769</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-65" date="1493035200">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix invalid reference in remount_active_mount().
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-66" date="1493985600">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - increase worker thread per-thread stack size.
  - limit getgrgid_r() buffer size.
  - add congigure option for limiting getgrgid_r() stack usage.
  - use above option to limit getgrgid_r() stack usage with configure.
- Resolves: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-68" date="1496404800">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix unset tsd group name handling.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-69" date="1496404801">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix a couple of covarity warning resulting in group name handling change.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-70.el7_4" date="1508414400">- bz1503945 - autofs option parsing for maps with fstype=autofs no longer
  works [rhel-7.4.z]
  - revert fix argc off by one in mount_autofs.c.
- bz1503946 - autofs map entry options field does not accept dot character
  [rhel-7.4.z]
  - allow dot in OPTIONSTR value lexer pattern.
  - handle additional nfs versions in mount_nfs.c.
- Resolves: rhbz#1503945 rhbz#1503946</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-70.el7_4.1" date="1508414401">- bz1515311 - Automount cannot access host shares after a reboot [rhel-7.4.z]
  - reset master map list on startup retry.
- Resolves: rhbz#1515311</changelog>
</package>
<package pkgid="470248abb7d5fcdd30a6ef546f385781f7d53016d96654fd2a5f01670d9b0569" name="autofs-debuginfo" arch="x86_64">
  <version epoch="1" ver="5.0.7" rel="70.el7_4.1"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-61" date="1490011200">- bz1101782 - autofs configured with sssd is not finding any maps
  - work around sss startup delay.
  - add sss master map wait config option (wait initially 0, disabled).
- Resolves: rhbz#1101782</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-62" date="1490616000">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - use autofs_point to store expire timeout where possibe.
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-63" date="1490875200">- bz1101782 - autofs configured with sssd is not finding any maps
  - fix work around sss startup delay.
- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix possible NULL derefernce.
- Related: rhbz#1101782 rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-64" date="1492430400">- bz1440769 - autofs is facing scalability issues
  - improve scalability of direct mount path component creation.
- Resolves: rhbz#1440769</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-65" date="1493035200">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix invalid reference in remount_active_mount().
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-66" date="1493985600">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - increase worker thread per-thread stack size.
  - limit getgrgid_r() buffer size.
  - add congigure option for limiting getgrgid_r() stack usage.
  - use above option to limit getgrgid_r() stack usage with configure.
- Resolves: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-68" date="1496404800">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix unset tsd group name handling.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-69" date="1496404801">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix a couple of covarity warning resulting in group name handling change.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-70.el7_4" date="1508414400">- bz1503945 - autofs option parsing for maps with fstype=autofs no longer
  works [rhel-7.4.z]
  - revert fix argc off by one in mount_autofs.c.
- bz1503946 - autofs map entry options field does not accept dot character
  [rhel-7.4.z]
  - allow dot in OPTIONSTR value lexer pattern.
  - handle additional nfs versions in mount_nfs.c.
- Resolves: rhbz#1503945 rhbz#1503946</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-70.el7_4.1" date="1508414401">- bz1515311 - Automount cannot access host shares after a reboot [rhel-7.4.z]
  - reset master map list on startup retry.
- Resolves: rhbz#1515311</changelog>
</package>
<package pkgid="afbf1ce3fcd1421e09a3e0dfce1aee39215ed52766ff87031531c284b32f359c" name="autofs-debuginfo" arch="i686">
  <version epoch="1" ver="5.0.7" rel="70.el7_4"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-60" date="1490011200">- bz1382093 - Improve logging in autofs
   - add the mount requestor's pid to pending_args.
   - create thread-local ID for mount attempts.
   - log functions to prefix messages with attempt_id if available.
   - factor out set_thread_mount_request_log_id().
   - add config option to use mount request log id.
- Resolves: rhbz#1382093</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-61" date="1490011201">- bz1101782 - autofs configured with sssd is not finding any maps
  - work around sss startup delay.
  - add sss master map wait config option (wait initially 0, disabled).
- Resolves: rhbz#1101782</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-62" date="1490616000">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - use autofs_point to store expire timeout where possibe.
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-63" date="1490875200">- bz1101782 - autofs configured with sssd is not finding any maps
  - fix work around sss startup delay.
- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix possible NULL derefernce.
- Related: rhbz#1101782 rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-64" date="1492430400">- bz1440769 - autofs is facing scalability issues
  - improve scalability of direct mount path component creation.
- Resolves: rhbz#1440769</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-65" date="1493035200">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix invalid reference in remount_active_mount().
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-66" date="1493985600">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - increase worker thread per-thread stack size.
  - limit getgrgid_r() buffer size.
  - add congigure option for limiting getgrgid_r() stack usage.
  - use above option to limit getgrgid_r() stack usage with configure.
- Resolves: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-68" date="1496404800">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix unset tsd group name handling.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-69" date="1496404801">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix a couple of covarity warning resulting in group name handling change.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-70.el7_4" date="1508414400">- bz1503945 - autofs option parsing for maps with fstype=autofs no longer
  works [rhel-7.4.z]
  - revert fix argc off by one in mount_autofs.c.
- bz1503946 - autofs map entry options field does not accept dot character
  [rhel-7.4.z]
  - allow dot in OPTIONSTR value lexer pattern.
  - handle additional nfs versions in mount_nfs.c.
- Resolves: rhbz#1503945 rhbz#1503946</changelog>
</package>
<package pkgid="eedfec9f4c34567ce01f8218ce8ed09a8627a4b9f7d7d443730e23f05a70a819" name="autofs-debuginfo" arch="x86_64">
  <version epoch="1" ver="5.0.7" rel="70.el7_4"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-60" date="1490011200">- bz1382093 - Improve logging in autofs
   - add the mount requestor's pid to pending_args.
   - create thread-local ID for mount attempts.
   - log functions to prefix messages with attempt_id if available.
   - factor out set_thread_mount_request_log_id().
   - add config option to use mount request log id.
- Resolves: rhbz#1382093</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-61" date="1490011201">- bz1101782 - autofs configured with sssd is not finding any maps
  - work around sss startup delay.
  - add sss master map wait config option (wait initially 0, disabled).
- Resolves: rhbz#1101782</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-62" date="1490616000">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - use autofs_point to store expire timeout where possibe.
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-63" date="1490875200">- bz1101782 - autofs configured with sssd is not finding any maps
  - fix work around sss startup delay.
- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix possible NULL derefernce.
- Related: rhbz#1101782 rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-64" date="1492430400">- bz1440769 - autofs is facing scalability issues
  - improve scalability of direct mount path component creation.
- Resolves: rhbz#1440769</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-65" date="1493035200">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix invalid reference in remount_active_mount().
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-66" date="1493985600">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - increase worker thread per-thread stack size.
  - limit getgrgid_r() buffer size.
  - add congigure option for limiting getgrgid_r() stack usage.
  - use above option to limit getgrgid_r() stack usage with configure.
- Resolves: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-68" date="1496404800">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix unset tsd group name handling.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-69" date="1496404801">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix a couple of covarity warning resulting in group name handling change.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-70.el7_4" date="1508414400">- bz1503945 - autofs option parsing for maps with fstype=autofs no longer
  works [rhel-7.4.z]
  - revert fix argc off by one in mount_autofs.c.
- bz1503946 - autofs map entry options field does not accept dot character
  [rhel-7.4.z]
  - allow dot in OPTIONSTR value lexer pattern.
  - handle additional nfs versions in mount_nfs.c.
- Resolves: rhbz#1503945 rhbz#1503946</changelog>
</package>
<package pkgid="37ca97959a13ff33a669a7f6b01a2dfd9aacad02ef6363b01f5886fd3455eefc" name="bash" arch="i686">
  <version epoch="0" ver="4.2.46" rel="29.el7_4"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-20" date="1468324800">- Fix a crash when lastpipe mode is enabled
  Resolves: #1326302</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-21" date="1476273600">- Fix a crash in trap signal handling
  Resolves: #1372806</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-22" date="1486641600">- Avoid crash in parameter expansion while expanding long strings
  Resolves: #1403255</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-23" date="1486641601">- Add a condition before setting pipeline_pgrp to shell_pgrp
  Resolves: #1377496</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-24" date="1486641602">- Recognize cd -e
  Resolves: #1267478</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-25" date="1486641603">- Plug a leak related to compound assignments
  Resolves: #1264101</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-26" date="1486641604">- CVE-2016-0634: Fix for arbitrary code execution via malicious hostname
  Resolves: #1379237</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-27" date="1487937600">- CVE-2016-7543: Fix for arbitrary code execution via SHELLOPTS+PS4 variables
  Resolves: #1426026</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-28" date="1488888000">- CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd
  Resolves: #1429838</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-29" date="1501761600">- Fix a pipe fd leak in process substitution
  Resolves: #1473245</changelog>
</package>
<package pkgid="fda4a786e5c86b978ab081b5e67de473be787ca2fc440b260254f28b7daa62d4" name="bash" arch="src">
  <version epoch="0" ver="4.2.46" rel="29.el7_4"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-20" date="1468324800">- Fix a crash when lastpipe mode is enabled
  Resolves: #1326302</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-21" date="1476273600">- Fix a crash in trap signal handling
  Resolves: #1372806</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-22" date="1486641600">- Avoid crash in parameter expansion while expanding long strings
  Resolves: #1403255</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-23" date="1486641601">- Add a condition before setting pipeline_pgrp to shell_pgrp
  Resolves: #1377496</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-24" date="1486641602">- Recognize cd -e
  Resolves: #1267478</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-25" date="1486641603">- Plug a leak related to compound assignments
  Resolves: #1264101</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-26" date="1486641604">- CVE-2016-0634: Fix for arbitrary code execution via malicious hostname
  Resolves: #1379237</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-27" date="1487937600">- CVE-2016-7543: Fix for arbitrary code execution via SHELLOPTS+PS4 variables
  Resolves: #1426026</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-28" date="1488888000">- CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd
  Resolves: #1429838</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-29" date="1501761600">- Fix a pipe fd leak in process substitution
  Resolves: #1473245</changelog>
</package>
<package pkgid="f334d4714145f273e5ec7376b11e5a00e47f4bc9740823a06b78fb3b7457d8ee" name="bash" arch="src">
  <version epoch="0" ver="4.2.46" rel="29.el7_4"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-20" date="1468324800">- Fix a crash when lastpipe mode is enabled
  Resolves: #1326302</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-21" date="1476273600">- Fix a crash in trap signal handling
  Resolves: #1372806</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-22" date="1486641600">- Avoid crash in parameter expansion while expanding long strings
  Resolves: #1403255</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-23" date="1486641601">- Add a condition before setting pipeline_pgrp to shell_pgrp
  Resolves: #1377496</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-24" date="1486641602">- Recognize cd -e
  Resolves: #1267478</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-25" date="1486641603">- Plug a leak related to compound assignments
  Resolves: #1264101</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-26" date="1486641604">- CVE-2016-0634: Fix for arbitrary code execution via malicious hostname
  Resolves: #1379237</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-27" date="1487937600">- CVE-2016-7543: Fix for arbitrary code execution via SHELLOPTS+PS4 variables
  Resolves: #1426026</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-28" date="1488888000">- CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd
  Resolves: #1429838</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-29" date="1501761600">- Fix a pipe fd leak in process substitution
  Resolves: #1473245</changelog>
</package>
<package pkgid="f60df431bc82fa75d5a1535359b0daf7efa3b042748fc2aba4f21ba7e5f63b07" name="bash" arch="x86_64">
  <version epoch="0" ver="4.2.46" rel="29.el7_4"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-20" date="1468324800">- Fix a crash when lastpipe mode is enabled
  Resolves: #1326302</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-21" date="1476273600">- Fix a crash in trap signal handling
  Resolves: #1372806</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-22" date="1486641600">- Avoid crash in parameter expansion while expanding long strings
  Resolves: #1403255</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-23" date="1486641601">- Add a condition before setting pipeline_pgrp to shell_pgrp
  Resolves: #1377496</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-24" date="1486641602">- Recognize cd -e
  Resolves: #1267478</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-25" date="1486641603">- Plug a leak related to compound assignments
  Resolves: #1264101</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-26" date="1486641604">- CVE-2016-0634: Fix for arbitrary code execution via malicious hostname
  Resolves: #1379237</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-27" date="1487937600">- CVE-2016-7543: Fix for arbitrary code execution via SHELLOPTS+PS4 variables
  Resolves: #1426026</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-28" date="1488888000">- CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd
  Resolves: #1429838</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-29" date="1501761600">- Fix a pipe fd leak in process substitution
  Resolves: #1473245</changelog>
</package>
<package pkgid="2d6b80493bfbbcaae8f55bb98d7a87c2c4a2ea18c140504a69ac53c41b704209" name="bash-debuginfo" arch="i686">
  <version epoch="0" ver="4.2.46" rel="29.el7_4"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-20" date="1468324800">- Fix a crash when lastpipe mode is enabled
  Resolves: #1326302</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-21" date="1476273600">- Fix a crash in trap signal handling
  Resolves: #1372806</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-22" date="1486641600">- Avoid crash in parameter expansion while expanding long strings
  Resolves: #1403255</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-23" date="1486641601">- Add a condition before setting pipeline_pgrp to shell_pgrp
  Resolves: #1377496</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-24" date="1486641602">- Recognize cd -e
  Resolves: #1267478</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-25" date="1486641603">- Plug a leak related to compound assignments
  Resolves: #1264101</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-26" date="1486641604">- CVE-2016-0634: Fix for arbitrary code execution via malicious hostname
  Resolves: #1379237</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-27" date="1487937600">- CVE-2016-7543: Fix for arbitrary code execution via SHELLOPTS+PS4 variables
  Resolves: #1426026</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-28" date="1488888000">- CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd
  Resolves: #1429838</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-29" date="1501761600">- Fix a pipe fd leak in process substitution
  Resolves: #1473245</changelog>
</package>
<package pkgid="097f6b3c42fb00cd46cea55d67a7ffe372e95770346e773c478a23e1986c56c3" name="bash-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.2.46" rel="29.el7_4"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-20" date="1468324800">- Fix a crash when lastpipe mode is enabled
  Resolves: #1326302</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-21" date="1476273600">- Fix a crash in trap signal handling
  Resolves: #1372806</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-22" date="1486641600">- Avoid crash in parameter expansion while expanding long strings
  Resolves: #1403255</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-23" date="1486641601">- Add a condition before setting pipeline_pgrp to shell_pgrp
  Resolves: #1377496</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-24" date="1486641602">- Recognize cd -e
  Resolves: #1267478</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-25" date="1486641603">- Plug a leak related to compound assignments
  Resolves: #1264101</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-26" date="1486641604">- CVE-2016-0634: Fix for arbitrary code execution via malicious hostname
  Resolves: #1379237</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-27" date="1487937600">- CVE-2016-7543: Fix for arbitrary code execution via SHELLOPTS+PS4 variables
  Resolves: #1426026</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-28" date="1488888000">- CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd
  Resolves: #1429838</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-29" date="1501761600">- Fix a pipe fd leak in process substitution
  Resolves: #1473245</changelog>
</package>
<package pkgid="3eefc23ce2b9ba62903cd5c0f413511f7790d3db800128fc13ac23e8521b5ce1" name="bash-doc" arch="i686">
  <version epoch="0" ver="4.2.46" rel="29.el7_4"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-20" date="1468324800">- Fix a crash when lastpipe mode is enabled
  Resolves: #1326302</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-21" date="1476273600">- Fix a crash in trap signal handling
  Resolves: #1372806</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-22" date="1486641600">- Avoid crash in parameter expansion while expanding long strings
  Resolves: #1403255</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-23" date="1486641601">- Add a condition before setting pipeline_pgrp to shell_pgrp
  Resolves: #1377496</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-24" date="1486641602">- Recognize cd -e
  Resolves: #1267478</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-25" date="1486641603">- Plug a leak related to compound assignments
  Resolves: #1264101</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-26" date="1486641604">- CVE-2016-0634: Fix for arbitrary code execution via malicious hostname
  Resolves: #1379237</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-27" date="1487937600">- CVE-2016-7543: Fix for arbitrary code execution via SHELLOPTS+PS4 variables
  Resolves: #1426026</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-28" date="1488888000">- CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd
  Resolves: #1429838</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-29" date="1501761600">- Fix a pipe fd leak in process substitution
  Resolves: #1473245</changelog>
</package>
<package pkgid="8a9867fcce891a3779d5ba52f1c2fc7a61c448875e7c5b23d316109e370d56ef" name="bash-doc" arch="x86_64">
  <version epoch="0" ver="4.2.46" rel="29.el7_4"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-20" date="1468324800">- Fix a crash when lastpipe mode is enabled
  Resolves: #1326302</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-21" date="1476273600">- Fix a crash in trap signal handling
  Resolves: #1372806</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-22" date="1486641600">- Avoid crash in parameter expansion while expanding long strings
  Resolves: #1403255</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-23" date="1486641601">- Add a condition before setting pipeline_pgrp to shell_pgrp
  Resolves: #1377496</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-24" date="1486641602">- Recognize cd -e
  Resolves: #1267478</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-25" date="1486641603">- Plug a leak related to compound assignments
  Resolves: #1264101</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-26" date="1486641604">- CVE-2016-0634: Fix for arbitrary code execution via malicious hostname
  Resolves: #1379237</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-27" date="1487937600">- CVE-2016-7543: Fix for arbitrary code execution via SHELLOPTS+PS4 variables
  Resolves: #1426026</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-28" date="1488888000">- CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd
  Resolves: #1429838</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-29" date="1501761600">- Fix a pipe fd leak in process substitution
  Resolves: #1473245</changelog>
</package>
<package pkgid="9478394a77e0bf241970c37b6b1ae2154a4e6576b0db35830b3e9b355d94030a" name="bind" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="4876d0ae34970b7b66dccc27c42301d7be395987ebfc3b970f504cb3741a5ece" name="bind" arch="src">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="04c19edf9eacab5a0904938dfc8202407b775ce4db451e360e26053940d23f08" name="bind" arch="src">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="d2a91aace12a08e48b9602dd37514fe3e553b6bb8794e20b930333cf13b092b3" name="bind" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="1e72ffa025299c5e79886988092037f0cd74e5eecb270751c0d4042a7254b088" name="bind" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="33381aa3e0908f3c3de5672b8b183ff47bdea8f80453e08f39965d58098947bc" name="bind" arch="src">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="19bbf00ee2d17fb5ffe1678f62d8260216ff52503c723fa2be461c828060983f" name="bind" arch="src">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="bc68ac5793a4ef1ebbf3d1c441d79d0ff3981ab69f56b7faae4f46cf172d24ce" name="bind" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="5003dd52fe2b14cf6faa23cbb2261ff732e0eb2c137cb9291f414c074d917b27" name="bind" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="cb5501409337d7e97f34aa4039874fc0e98e64db6c9f50f1c43a66d3ddbcf2e8" name="bind" arch="src">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="4bf725cd75206ff12750738457a69ab9aada0ec082b396e1559600d34be8da7b" name="bind" arch="src">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="26bd5cbd5ebfe0423a660f8966239c8079850a2d5f66ad040b3e53890de40b46" name="bind" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="bf4356d3ab7373069706623010e4b5e06fefe501cf10feba8de898c6d490110e" name="bind-chroot" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="004709ca962a2dd8dc0d86b1d8c45de40eda8a800631877e3fcb73815a55fb0f" name="bind-chroot" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="78453554dc2d89c93093989322dcf4143862a84778e00e376914fce60567b25b" name="bind-chroot" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="7683bbac10ca54ba413fb6ff0d5b48890e067a2d28f124d215073511b739b06a" name="bind-chroot" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="05d1703c88d06f5f9062ec931e13c8f3feb271dae8d9e965b9634930e16d5d30" name="bind-chroot" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="2d54b1b50fb1ce6371be7053b662f9e0ea4d78562eaf213a5d8be2bc96fbfbc3" name="bind-chroot" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="f6609d28f538b6d9a100cb6b0f2e2e20bc1af04413038fa6bdbc24a4500e7ebc" name="bind-debuginfo" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="5fefb280443bf69529fc580999bf3ea549e39eb312555dc57f1a38e63ca41147" name="bind-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="1dfbb47c935d10a7cef9f431770254ac6bc869162a661e116a685befd56d6a0d" name="bind-debuginfo" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="bb35b90bf7ffb0169bb34e7fbc8c8ba462ed485c1a9f36488a814bd9a21b4e18" name="bind-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="c64f8683957a52de8927317cf49b7c0a65034ca8488c8a7d1d6089ab8d95065c" name="bind-debuginfo" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="9d8999d6e367e8d555ce06ed9e7a960682fe4cdaec818a407880d41364150381" name="bind-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="3bf9ab20faa720268ac8d63f97f2aa85f585cdd45f7ea8a31b93d89e9af26659" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="7cec592448ada581bc5c5da232b6a87f160b24815258d8a9393b08ff295e559a" name="bind-devel" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="85fabe07ee67a4a3c1d5409ddbc7467ccd3e72c8a068add6f735a3e605c0a3f7" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="3d9ffc220507d900589a22d0027ec923f14a537b2dbc78827dc9b9fc42675d73" name="bind-devel" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="420016a3c44f4a10b3e2d24cd4022e2d55833f7364aa22f170372599fd58782b" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="f4dc32bc0ee999388dd4d0bfbfc69d1ab64d6eb88446a9352c3683c1e7ca7778" name="bind-devel" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="e4a534b5d6fa12f2da72ffd85200a86414064e3f0540e8c61372b9777d52ffe2" name="bind-dyndb-ldap" arch="i686">
  <version epoch="0" ver="11.1" rel="4.el7"/>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 9.0-1" date="1463054400">- update to latest upstream version
- related: #1292145 Rebase bind-dyndb-ldap to latest upstream version</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-1" date="1466510400">- update to latest upstream version
- resolves: #1292145 Rebase bind-dyndb-ldap to latest upstream version</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-2" date="1469620800">- resolves: #1359220 prevent crash while reloading previously invalid
  but now valid DNS zone</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-3" date="1469707200">- rebuild against redhat-rpm-config-9.1.0-71.el7 to fix /usr/share/doc naming
- related: #1057327</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-4" date="1471348800">- resolves: #1366565 Deletion of DNS root zone breaks global forwarding</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-5" date="1474459200">- resolves: #1376851 Unable to set named_write_master_zones boolean on upgrade</changelog>
  <changelog author="Tomas Krizek &lt;tkrizek@redhat.com&gt; - 11.1-1" date="1489579200">- update to letest upstream version
- resolves: #1393889 Rebase to bind-dyndb-ldap 11+
- resolves: #1165796 bind-dyndb-ldap crashes if server is shutting down and connection to LDAP is down
- resolves: #1413805 bind-dyndb-ldap default schema is shipped with syntax error</changelog>
  <changelog author="Tomas Krizek &lt;tkrizek@redhat.com&gt; - 11.1-2" date="1489579201">- bump NVR to fix bind dependencies</changelog>
  <changelog author="Tomas Krizek &lt;tkrizek@redhat.com&gt; - 11.1-3" date="1493208000">- resolves: #1436268 crash when server_id is not present in named.conf
- coverity fixes</changelog>
  <changelog author="Tomas Krizek &lt;tkrizek@redhat.com&gt; - 11.1-4" date="1499860800">- Resolves: #1469984 required bind version doesn't have the dyndb interface</changelog>
</package>
<package pkgid="c666c91073b2b1bb142d7f17fe4cd872c1e012b60f159c5f889362dd6e80e7a5" name="bind-dyndb-ldap" arch="src">
  <version epoch="0" ver="11.1" rel="4.el7"/>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 9.0-1" date="1463054400">- update to latest upstream version
- related: #1292145 Rebase bind-dyndb-ldap to latest upstream version</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-1" date="1466510400">- update to latest upstream version
- resolves: #1292145 Rebase bind-dyndb-ldap to latest upstream version</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-2" date="1469620800">- resolves: #1359220 prevent crash while reloading previously invalid
  but now valid DNS zone</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-3" date="1469707200">- rebuild against redhat-rpm-config-9.1.0-71.el7 to fix /usr/share/doc naming
- related: #1057327</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-4" date="1471348800">- resolves: #1366565 Deletion of DNS root zone breaks global forwarding</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-5" date="1474459200">- resolves: #1376851 Unable to set named_write_master_zones boolean on upgrade</changelog>
  <changelog author="Tomas Krizek &lt;tkrizek@redhat.com&gt; - 11.1-1" date="1489579200">- update to letest upstream version
- resolves: #1393889 Rebase to bind-dyndb-ldap 11+
- resolves: #1165796 bind-dyndb-ldap crashes if server is shutting down and connection to LDAP is down
- resolves: #1413805 bind-dyndb-ldap default schema is shipped with syntax error</changelog>
  <changelog author="Tomas Krizek &lt;tkrizek@redhat.com&gt; - 11.1-2" date="1489579201">- bump NVR to fix bind dependencies</changelog>
  <changelog author="Tomas Krizek &lt;tkrizek@redhat.com&gt; - 11.1-3" date="1493208000">- resolves: #1436268 crash when server_id is not present in named.conf
- coverity fixes</changelog>
  <changelog author="Tomas Krizek &lt;tkrizek@redhat.com&gt; - 11.1-4" date="1499860800">- Resolves: #1469984 required bind version doesn't have the dyndb interface</changelog>
</package>
<package pkgid="6099824de1b24f951b2440e7168a583bc02e1281d2ea4b056df521d11d41e210" name="bind-dyndb-ldap" arch="src">
  <version epoch="0" ver="11.1" rel="4.el7"/>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 9.0-1" date="1463054400">- update to latest upstream version
- related: #1292145 Rebase bind-dyndb-ldap to latest upstream version</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-1" date="1466510400">- update to latest upstream version
- resolves: #1292145 Rebase bind-dyndb-ldap to latest upstream version</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-2" date="1469620800">- resolves: #1359220 prevent crash while reloading previously invalid
  but now valid DNS zone</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-3" date="1469707200">- rebuild against redhat-rpm-config-9.1.0-71.el7 to fix /usr/share/doc naming
- related: #1057327</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-4" date="1471348800">- resolves: #1366565 Deletion of DNS root zone breaks global forwarding</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-5" date="1474459200">- resolves: #1376851 Unable to set named_write_master_zones boolean on upgrade</changelog>
  <changelog author="Tomas Krizek &lt;tkrizek@redhat.com&gt; - 11.1-1" date="1489579200">- update to letest upstream version
- resolves: #1393889 Rebase to bind-dyndb-ldap 11+
- resolves: #1165796 bind-dyndb-ldap crashes if server is shutting down and connection to LDAP is down
- resolves: #1413805 bind-dyndb-ldap default schema is shipped with syntax error</changelog>
  <changelog author="Tomas Krizek &lt;tkrizek@redhat.com&gt; - 11.1-2" date="1489579201">- bump NVR to fix bind dependencies</changelog>
  <changelog author="Tomas Krizek &lt;tkrizek@redhat.com&gt; - 11.1-3" date="1493208000">- resolves: #1436268 crash when server_id is not present in named.conf
- coverity fixes</changelog>
  <changelog author="Tomas Krizek &lt;tkrizek@redhat.com&gt; - 11.1-4" date="1499860800">- Resolves: #1469984 required bind version doesn't have the dyndb interface</changelog>
</package>
<package pkgid="ad93cd35f28b9b837713cc834947ed9b7b94175cb9eb6e0e69635dfa6f51d1be" name="bind-dyndb-ldap" arch="x86_64">
  <version epoch="0" ver="11.1" rel="4.el7"/>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 9.0-1" date="1463054400">- update to latest upstream version
- related: #1292145 Rebase bind-dyndb-ldap to latest upstream version</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-1" date="1466510400">- update to latest upstream version
- resolves: #1292145 Rebase bind-dyndb-ldap to latest upstream version</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-2" date="1469620800">- resolves: #1359220 prevent crash while reloading previously invalid
  but now valid DNS zone</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-3" date="1469707200">- rebuild against redhat-rpm-config-9.1.0-71.el7 to fix /usr/share/doc naming
- related: #1057327</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-4" date="1471348800">- resolves: #1366565 Deletion of DNS root zone breaks global forwarding</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-5" date="1474459200">- resolves: #1376851 Unable to set named_write_master_zones boolean on upgrade</changelog>
  <changelog author="Tomas Krizek &lt;tkrizek@redhat.com&gt; - 11.1-1" date="1489579200">- update to letest upstream version
- resolves: #1393889 Rebase to bind-dyndb-ldap 11+
- resolves: #1165796 bind-dyndb-ldap crashes if server is shutting down and connection to LDAP is down
- resolves: #1413805 bind-dyndb-ldap default schema is shipped with syntax error</changelog>
  <changelog author="Tomas Krizek &lt;tkrizek@redhat.com&gt; - 11.1-2" date="1489579201">- bump NVR to fix bind dependencies</changelog>
  <changelog author="Tomas Krizek &lt;tkrizek@redhat.com&gt; - 11.1-3" date="1493208000">- resolves: #1436268 crash when server_id is not present in named.conf
- coverity fixes</changelog>
  <changelog author="Tomas Krizek &lt;tkrizek@redhat.com&gt; - 11.1-4" date="1499860800">- Resolves: #1469984 required bind version doesn't have the dyndb interface</changelog>
</package>
<package pkgid="a8ea92074aac408ef23563c91ea8f5f3d66a7130bf264dbebb0ae66dabaf042d" name="bind-dyndb-ldap-debuginfo" arch="i686">
  <version epoch="0" ver="11.1" rel="4.el7"/>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 9.0-1" date="1463054400">- update to latest upstream version
- related: #1292145 Rebase bind-dyndb-ldap to latest upstream version</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-1" date="1466510400">- update to latest upstream version
- resolves: #1292145 Rebase bind-dyndb-ldap to latest upstream version</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-2" date="1469620800">- resolves: #1359220 prevent crash while reloading previously invalid
  but now valid DNS zone</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-3" date="1469707200">- rebuild against redhat-rpm-config-9.1.0-71.el7 to fix /usr/share/doc naming
- related: #1057327</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-4" date="1471348800">- resolves: #1366565 Deletion of DNS root zone breaks global forwarding</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-5" date="1474459200">- resolves: #1376851 Unable to set named_write_master_zones boolean on upgrade</changelog>
  <changelog author="Tomas Krizek &lt;tkrizek@redhat.com&gt; - 11.1-1" date="1489579200">- update to letest upstream version
- resolves: #1393889 Rebase to bind-dyndb-ldap 11+
- resolves: #1165796 bind-dyndb-ldap crashes if server is shutting down and connection to LDAP is down
- resolves: #1413805 bind-dyndb-ldap default schema is shipped with syntax error</changelog>
  <changelog author="Tomas Krizek &lt;tkrizek@redhat.com&gt; - 11.1-2" date="1489579201">- bump NVR to fix bind dependencies</changelog>
  <changelog author="Tomas Krizek &lt;tkrizek@redhat.com&gt; - 11.1-3" date="1493208000">- resolves: #1436268 crash when server_id is not present in named.conf
- coverity fixes</changelog>
  <changelog author="Tomas Krizek &lt;tkrizek@redhat.com&gt; - 11.1-4" date="1499860800">- Resolves: #1469984 required bind version doesn't have the dyndb interface</changelog>
</package>
<package pkgid="cc67c9e1265f83c52727ab8cee5e607ecdc11dd452061aa5b70b1dffb679973a" name="bind-dyndb-ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.1" rel="4.el7"/>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 9.0-1" date="1463054400">- update to latest upstream version
- related: #1292145 Rebase bind-dyndb-ldap to latest upstream version</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-1" date="1466510400">- update to latest upstream version
- resolves: #1292145 Rebase bind-dyndb-ldap to latest upstream version</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-2" date="1469620800">- resolves: #1359220 prevent crash while reloading previously invalid
  but now valid DNS zone</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-3" date="1469707200">- rebuild against redhat-rpm-config-9.1.0-71.el7 to fix /usr/share/doc naming
- related: #1057327</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-4" date="1471348800">- resolves: #1366565 Deletion of DNS root zone breaks global forwarding</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-5" date="1474459200">- resolves: #1376851 Unable to set named_write_master_zones boolean on upgrade</changelog>
  <changelog author="Tomas Krizek &lt;tkrizek@redhat.com&gt; - 11.1-1" date="1489579200">- update to letest upstream version
- resolves: #1393889 Rebase to bind-dyndb-ldap 11+
- resolves: #1165796 bind-dyndb-ldap crashes if server is shutting down and connection to LDAP is down
- resolves: #1413805 bind-dyndb-ldap default schema is shipped with syntax error</changelog>
  <changelog author="Tomas Krizek &lt;tkrizek@redhat.com&gt; - 11.1-2" date="1489579201">- bump NVR to fix bind dependencies</changelog>
  <changelog author="Tomas Krizek &lt;tkrizek@redhat.com&gt; - 11.1-3" date="1493208000">- resolves: #1436268 crash when server_id is not present in named.conf
- coverity fixes</changelog>
  <changelog author="Tomas Krizek &lt;tkrizek@redhat.com&gt; - 11.1-4" date="1499860800">- Resolves: #1469984 required bind version doesn't have the dyndb interface</changelog>
</package>
<package pkgid="d1c5567cb58549bdc8eef65893224e897372c0a0871e97966584ba6b08b0a02a" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="ef9e9694941330a44af32954857369e4157d9c617398dcee5c3f8f0e1ad26438" name="bind-libs" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="fc18ad14cf70226afdc9bec000aec7f4d4bde450081363d1cdb4587e7f50be25" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="5e68234d02bf601b299c6dcd608cb565568af21fe68742e50693f9c6c0b94576" name="bind-libs" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="db321f37f8dafb0824ec45c65fc67ef592a4455d5386c8dcc704ac8dfcbffbd7" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="c5f8e34f25d3777987a829a395d0aa8e18f5621d76bd858f619a1b91acdc9fc7" name="bind-libs" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="7540694bb1ffcf0146be098903d12287d3cd4b0ebbf234be6c91eb4f89d1a79c" name="bind-libs-lite" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="564bdd76b2d83e859f260a68e41c23de3e1e84e940cd9c08d58a3f225736ff96" name="bind-libs-lite" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="a27106d5104405e3e28e4ff85eab213b4d8bf2413a8d498be8f6228024f82110" name="bind-libs-lite" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="72e9e0299fcde81117c54477dde96dfad33fde0b1c642bf847b5d8918329bb51" name="bind-libs-lite" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="01a2953c6a1fe97ef14815afd77f36acfdaec118d1fb20b2d5fe3757be67a53b" name="bind-libs-lite" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="2eaf5dfd81a841e3c8e214a6b0b3deab73fa0220b287fe5d7d20fe65c184edcd" name="bind-libs-lite" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="c5d38951ee39984a9ae8e147a97d3e51fea7a60ed5461b6aca65396bd448220b" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="1bddd868a2ccbed57f554a3f6322b98036d55101a519555bf17da54497150634" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="af873368720998ca8afbbf9dac69af735176043448488dc95714700b89f0eab1" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="771eb3dd6faff650e16b45f928429f28a6d3c684ceac420ee2e5074cc0dbc210" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="b05c353a9a28ea2ab9e63017daa745db3bd89df55cbe324471b10e5adae77af2" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="e83bf061ca673c344b99ec9675058bd7c6c2ca05625519d406f852b6e8e72d9c" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="5c9c507961a2ff7bff8744855fe59b7fb3be06916a3018f661e718bfff920850" name="bind-lite-devel" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="e28ac1f3270330da49ae85621d0d392de266baf8eb04a1cebda4b56966e7d28b" name="bind-lite-devel" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="df2e23c657ca622d525e88155434eb074cd847c89f66a0859a5ef360fd8212a6" name="bind-lite-devel" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="0647c202c8377eebdecc3ad537cdca73559d7a07de774c43be43eb79415d946b" name="bind-lite-devel" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="291f27fe769a25074fee747eb11e9bc6eb06d048c5680805e03e7b1e010b32b5" name="bind-lite-devel" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="79cf29c440cffb3481e3a2f50dd7a65762bf9ea45c1b309630f96a01a377e03c" name="bind-lite-devel" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="403a180a1c96844fd3a333ef1688c890e7939ac5dc61dd7b942f3856eec1a87f" name="bind-pkcs11" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="66228c4d4f86e81a4c924c178956c4b32d4abefac3f680c57503bd2893016fc9" name="bind-pkcs11" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="ce2de6990f9debd522341051765d305c8af51b27adbe53d2c0c239e62c5ccf94" name="bind-pkcs11" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="26e064bdb558c45d7ded766cd658e5d573be8cee1eae8416484a2a719e852dd0" name="bind-pkcs11" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="eee098da77217e97a3d66b54ef40eaedd24779d8e564fc924d78978e743c3755" name="bind-pkcs11" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="7ebefd1323f6c2f5342a94204dca4d4b4ba8c700f87efdf76d3c21551a369608" name="bind-pkcs11" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="6452096b3f3c896a3dbb8e6d333a17409a08c74710a6971757a7ef57773b8bb8" name="bind-pkcs11-devel" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="0b4392a1307e0cccbba9dfda544a13dc018790e1d2db2373724062fa0f8bbe8e" name="bind-pkcs11-devel" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="783e9c2a8d527d553dbb3082b5f6edb8f59fc4b559b8e50d9426e114a2fa28bd" name="bind-pkcs11-devel" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="bbd0bafbee29a9023e1b8154cdcb95e7dec41da17ed7e5baf8bf6d982edfaaf3" name="bind-pkcs11-devel" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="a08acde77f70d8e6cc394fa2959929504ee500c9551251161e029d47cfa37346" name="bind-pkcs11-devel" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="3d1e85a6a9b47d6fda6a21f34c757171eb5b11fe4ec7a090ee5e0c559a43788a" name="bind-pkcs11-devel" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="ff9e0a6da9f62ab43a0d885aad67a9319c7c00ec3ff66bcb58fe3390c23c3430" name="bind-pkcs11-libs" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="a27f862efe983e28b851e250c6be7830ef7abf8659272f8b90d1c5539b99c203" name="bind-pkcs11-libs" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="75e6f8d4069ad18e5b6fdbf97fc69e5e447c9fc532c5aa9c66eeedaf478525a2" name="bind-pkcs11-libs" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="bbca5b29b60533b9ef5cee5185520c76e1165597c6f4cbe5e2119f56ba3cb8ba" name="bind-pkcs11-libs" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="f5983cfce9784feb9fed4b40761c67a3b5247790942548fa3c90f991b9f994fe" name="bind-pkcs11-libs" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="9bc0d7d8428e9f6f2a6c2e154b2a59643fb9e40545bc017507d3d58ff636740e" name="bind-pkcs11-libs" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="878a9e10559a10f255517f1ec8705decb7d4ed52904a5576ccaf4bf64f884e13" name="bind-pkcs11-utils" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="12d37a801d9cd2dd1210f4a04872e99590ef147682a7558b08abc9de420937b8" name="bind-pkcs11-utils" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="79aca76889185d76d27c19fd1c81428cbf5b73837c10f23bf7a626d770afc665" name="bind-pkcs11-utils" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="74ef16b19943d631057874cd20dfda8d7beb26610f76ef0988d3ef5e4aa3bb09" name="bind-pkcs11-utils" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="af37303def7ca34576500aec7a72a4c2fe2c381786f84304d2b5fce82988afe2" name="bind-pkcs11-utils" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="52ae26dbda879072aa3c7ecd70d494d6cab06e01718fc02de09d1d6d15d5e1e2" name="bind-pkcs11-utils" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="07aac10d23c74225d710e4ad937b092847b4fee387dfc1156d2aae53ba399441" name="bind-sdb" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="b90be10a638c5f547388e397ec6ae60cd599f0f3f827fef64ae59e2a93a959d8" name="bind-sdb" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="3660508a64720823a406e7cf9df188da0832a5bb9931f4c30d1e527f9ec2da0d" name="bind-sdb" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="4dac276b4186455adb82152f0232a29aec1d803fface6487b8951ef76b972c89" name="bind-sdb" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="72a8cf36db258b959e7582d1aede60b043bf146ee3625076efa73b86f601e8b0" name="bind-sdb" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="1a59025636d2cbf389810e8c9764f23c5c20ab2cc3af45fab1a86b513d881895" name="bind-sdb" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="6bf09ac78eb8bc3cbb5fd3e58225d78536c6c3b34f42cfe7d924f9ebaa13364a" name="bind-sdb-chroot" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="6929a3bbf5c641117fec79ffeb39ea9f1951ac8c76b4f1bed06132eff5558f0e" name="bind-sdb-chroot" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="20b37e8a868634810aa8b3844e60d1a58a45cc9bcddf94891e6044fe65077620" name="bind-sdb-chroot" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="4185cc886b8dc6c541fed842b7b6a4bee71865ddf46be227f6254f364a7b22ed" name="bind-sdb-chroot" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="32d8885c22c84ac07f463db53254d8d623dd11e996ab25fd57903e8205c2aa6b" name="bind-sdb-chroot" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="617033c6e11fba4ee72981a51544010d090cdec0e2f377e06482a47872994530" name="bind-sdb-chroot" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="d6cc1bf3aaf396772ad4cd421aea104e2eac596a7169494262b2e69d0dc33bce" name="bind-utils" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="9aae7ae5d8c466ea27b5ba3b6e0fa2f6eb3303b3cb28bd30412d6df0878fe332" name="bind-utils" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-42" date="1487678400">- Support WKS records in chroot</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="5975ce3af5d5e675d93e674b95bdbe05fb4184e67944b088dbc656e877466941" name="bind-utils" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="6e0864d4634822416b928fea44299eebf4188f5ba349cc0239ee89c46bd6b966" name="bind-utils" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="b4a56027cc0be49de07ca02c84d865ee4f1fbc682e2f15ab5b4b9f2d27c2a5ad" name="bind-utils" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="4f062131297bfdbc56e7920f92b31e337e77bb0dc3f01fb94427b59cbf01b21d" name="bind-utils" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="7755749e1ecfbb661f1da0153975eb9c37c1e8939d89347c6049563040f18f22" name="binutils" arch="i686">
  <version epoch="0" ver="2.25.1" rel="32.base.el7_4.1"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-22-base" date="1470657600">- Fix date format bug in changelog which was preventing package build.</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-23-base" date="1483704000">- Add code to detect attempts to link PIE and non-PIE S390 binaries.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-24-base" date="1483704001">- Fix thinko in previous patch.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-25-base" date="1484568000">- Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
  (#1326710)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-26-base" date="1484568001">- Speed up displaying disassembly when mixed with source code.
  (#1311352)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-27-base" date="1493294400">- Fix infnite loop in linker when counting PowerPC stubs.
  (#1406498)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-28-base" date="1493899200">- Disable fix for 1406430.  It breaks building real s390 executables.
  (#1447209)
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-31.base" date="1494331200">- Fix generation of PLT entries for s390 binaries.
  (#1440168)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base" date="1498824000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1465318)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.1" date="1502280000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1479773)</changelog>
</package>
<package pkgid="7319c8d8263a078876483ca1401bbcc466e4a06fc8ae4ba7dfb6c7f87785b7c4" name="binutils" arch="src">
  <version epoch="0" ver="2.25.1" rel="32.base.el7_4.1"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-22-base" date="1470657600">- Fix date format bug in changelog which was preventing package build.</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-23-base" date="1483704000">- Add code to detect attempts to link PIE and non-PIE S390 binaries.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-24-base" date="1483704001">- Fix thinko in previous patch.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-25-base" date="1484568000">- Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
  (#1326710)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-26-base" date="1484568001">- Speed up displaying disassembly when mixed with source code.
  (#1311352)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-27-base" date="1493294400">- Fix infnite loop in linker when counting PowerPC stubs.
  (#1406498)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-28-base" date="1493899200">- Disable fix for 1406430.  It breaks building real s390 executables.
  (#1447209)
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-31.base" date="1494331200">- Fix generation of PLT entries for s390 binaries.
  (#1440168)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base" date="1498824000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1465318)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.1" date="1502280000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1479773)</changelog>
</package>
<package pkgid="8e59c6a590eba5104177662b182abbfa5f23cb9971025e4a9fd12574f22c260b" name="binutils" arch="src">
  <version epoch="0" ver="2.25.1" rel="32.base.el7_4.1"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-22-base" date="1470657600">- Fix date format bug in changelog which was preventing package build.</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-23-base" date="1483704000">- Add code to detect attempts to link PIE and non-PIE S390 binaries.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-24-base" date="1483704001">- Fix thinko in previous patch.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-25-base" date="1484568000">- Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
  (#1326710)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-26-base" date="1484568001">- Speed up displaying disassembly when mixed with source code.
  (#1311352)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-27-base" date="1493294400">- Fix infnite loop in linker when counting PowerPC stubs.
  (#1406498)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-28-base" date="1493899200">- Disable fix for 1406430.  It breaks building real s390 executables.
  (#1447209)
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-31.base" date="1494331200">- Fix generation of PLT entries for s390 binaries.
  (#1440168)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base" date="1498824000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1465318)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.1" date="1502280000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1479773)</changelog>
</package>
<package pkgid="160bd9c1865d0423a16e43c964681153f580a46d25208bb7a81ea8c2fdef9ba9" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.25.1" rel="32.base.el7_4.1"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-22-base" date="1470657600">- Fix date format bug in changelog which was preventing package build.</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-23-base" date="1483704000">- Add code to detect attempts to link PIE and non-PIE S390 binaries.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-24-base" date="1483704001">- Fix thinko in previous patch.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-25-base" date="1484568000">- Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
  (#1326710)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-26-base" date="1484568001">- Speed up displaying disassembly when mixed with source code.
  (#1311352)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-27-base" date="1493294400">- Fix infnite loop in linker when counting PowerPC stubs.
  (#1406498)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-28-base" date="1493899200">- Disable fix for 1406430.  It breaks building real s390 executables.
  (#1447209)
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-31.base" date="1494331200">- Fix generation of PLT entries for s390 binaries.
  (#1440168)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base" date="1498824000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1465318)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.1" date="1502280000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1479773)</changelog>
</package>
<package pkgid="35985cc54d66e50637b7b2f15c366df32a92ab3398026b02b4dbccb6c8c7009e" name="binutils" arch="i686">
  <version epoch="0" ver="2.25.1" rel="32.base.el7_4.2"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-23-base" date="1483704000">- Add code to detect attempts to link PIE and non-PIE S390 binaries.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-24-base" date="1483704001">- Fix thinko in previous patch.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-25-base" date="1484568000">- Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
  (#1326710)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-26-base" date="1484568001">- Speed up displaying disassembly when mixed with source code.
  (#1311352)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-27-base" date="1493294400">- Fix infnite loop in linker when counting PowerPC stubs.
  (#1406498)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-28-base" date="1493899200">- Disable fix for 1406430.  It breaks building real s390 executables.
  (#1447209)
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-31.base" date="1494331200">- Fix generation of PLT entries for s390 binaries.
  (#1440168)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base" date="1498824000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1465318)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.1" date="1502280000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1479773)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.2" date="1511179200">- Fix a seg-fault in the PowerPC linker when discarding .plt sections when -pie is used and undefined weak symbols are present.  
  (#1515347)
- Add SCV, RFSCV amd LNIA instructions to Power9 port of gas.
  (#1449585)</changelog>
</package>
<package pkgid="de423616dce9ca0f64e6d225cb06162f51d6c91d3a74c9f4942ddc0fc0e084f1" name="binutils" arch="src">
  <version epoch="0" ver="2.25.1" rel="32.base.el7_4.2"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-23-base" date="1483704000">- Add code to detect attempts to link PIE and non-PIE S390 binaries.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-24-base" date="1483704001">- Fix thinko in previous patch.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-25-base" date="1484568000">- Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
  (#1326710)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-26-base" date="1484568001">- Speed up displaying disassembly when mixed with source code.
  (#1311352)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-27-base" date="1493294400">- Fix infnite loop in linker when counting PowerPC stubs.
  (#1406498)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-28-base" date="1493899200">- Disable fix for 1406430.  It breaks building real s390 executables.
  (#1447209)
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-31.base" date="1494331200">- Fix generation of PLT entries for s390 binaries.
  (#1440168)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base" date="1498824000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1465318)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.1" date="1502280000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1479773)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.2" date="1511179200">- Fix a seg-fault in the PowerPC linker when discarding .plt sections when -pie is used and undefined weak symbols are present.  
  (#1515347)
- Add SCV, RFSCV amd LNIA instructions to Power9 port of gas.
  (#1449585)</changelog>
</package>
<package pkgid="6539a4e2a2a9fde7fe76a3604980eedfa29fa1d30c33c66cd735c500bcbe58c2" name="binutils" arch="src">
  <version epoch="0" ver="2.25.1" rel="32.base.el7_4.2"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-23-base" date="1483704000">- Add code to detect attempts to link PIE and non-PIE S390 binaries.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-24-base" date="1483704001">- Fix thinko in previous patch.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-25-base" date="1484568000">- Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
  (#1326710)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-26-base" date="1484568001">- Speed up displaying disassembly when mixed with source code.
  (#1311352)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-27-base" date="1493294400">- Fix infnite loop in linker when counting PowerPC stubs.
  (#1406498)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-28-base" date="1493899200">- Disable fix for 1406430.  It breaks building real s390 executables.
  (#1447209)
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-31.base" date="1494331200">- Fix generation of PLT entries for s390 binaries.
  (#1440168)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base" date="1498824000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1465318)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.1" date="1502280000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1479773)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.2" date="1511179200">- Fix a seg-fault in the PowerPC linker when discarding .plt sections when -pie is used and undefined weak symbols are present.  
  (#1515347)
- Add SCV, RFSCV amd LNIA instructions to Power9 port of gas.
  (#1449585)</changelog>
</package>
<package pkgid="ca3a96286b29a3e686e752591b1daacdb15275394f9e519c7d636bc192046400" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.25.1" rel="32.base.el7_4.2"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-23-base" date="1483704000">- Add code to detect attempts to link PIE and non-PIE S390 binaries.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-24-base" date="1483704001">- Fix thinko in previous patch.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-25-base" date="1484568000">- Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
  (#1326710)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-26-base" date="1484568001">- Speed up displaying disassembly when mixed with source code.
  (#1311352)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-27-base" date="1493294400">- Fix infnite loop in linker when counting PowerPC stubs.
  (#1406498)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-28-base" date="1493899200">- Disable fix for 1406430.  It breaks building real s390 executables.
  (#1447209)
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-31.base" date="1494331200">- Fix generation of PLT entries for s390 binaries.
  (#1440168)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base" date="1498824000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1465318)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.1" date="1502280000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1479773)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.2" date="1511179200">- Fix a seg-fault in the PowerPC linker when discarding .plt sections when -pie is used and undefined weak symbols are present.  
  (#1515347)
- Add SCV, RFSCV amd LNIA instructions to Power9 port of gas.
  (#1449585)</changelog>
</package>
<package pkgid="16a3dae281bbb04642501060ad20612b29f6f09781d7b6d888e40ec02e2723d0" name="binutils-debuginfo" arch="i686">
  <version epoch="0" ver="2.25.1" rel="32.base.el7_4.1"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-22-base" date="1470657600">- Fix date format bug in changelog which was preventing package build.</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-23-base" date="1483704000">- Add code to detect attempts to link PIE and non-PIE S390 binaries.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-24-base" date="1483704001">- Fix thinko in previous patch.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-25-base" date="1484568000">- Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
  (#1326710)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-26-base" date="1484568001">- Speed up displaying disassembly when mixed with source code.
  (#1311352)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-27-base" date="1493294400">- Fix infnite loop in linker when counting PowerPC stubs.
  (#1406498)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-28-base" date="1493899200">- Disable fix for 1406430.  It breaks building real s390 executables.
  (#1447209)
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-31.base" date="1494331200">- Fix generation of PLT entries for s390 binaries.
  (#1440168)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base" date="1498824000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1465318)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.1" date="1502280000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1479773)</changelog>
</package>
<package pkgid="a245509077f9f96ba846910bc1ffa09ec42b116e1f8bb8f02432dfd50a192b05" name="binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.25.1" rel="32.base.el7_4.1"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-22-base" date="1470657600">- Fix date format bug in changelog which was preventing package build.</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-23-base" date="1483704000">- Add code to detect attempts to link PIE and non-PIE S390 binaries.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-24-base" date="1483704001">- Fix thinko in previous patch.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-25-base" date="1484568000">- Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
  (#1326710)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-26-base" date="1484568001">- Speed up displaying disassembly when mixed with source code.
  (#1311352)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-27-base" date="1493294400">- Fix infnite loop in linker when counting PowerPC stubs.
  (#1406498)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-28-base" date="1493899200">- Disable fix for 1406430.  It breaks building real s390 executables.
  (#1447209)
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-31.base" date="1494331200">- Fix generation of PLT entries for s390 binaries.
  (#1440168)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base" date="1498824000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1465318)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.1" date="1502280000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1479773)</changelog>
</package>
<package pkgid="aea4d9cdcc5d8485b1d68c1a55c6684bd9070fd0218ec95031cce51b1c4bade0" name="binutils-debuginfo" arch="i686">
  <version epoch="0" ver="2.25.1" rel="32.base.el7_4.2"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-23-base" date="1483704000">- Add code to detect attempts to link PIE and non-PIE S390 binaries.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-24-base" date="1483704001">- Fix thinko in previous patch.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-25-base" date="1484568000">- Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
  (#1326710)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-26-base" date="1484568001">- Speed up displaying disassembly when mixed with source code.
  (#1311352)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-27-base" date="1493294400">- Fix infnite loop in linker when counting PowerPC stubs.
  (#1406498)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-28-base" date="1493899200">- Disable fix for 1406430.  It breaks building real s390 executables.
  (#1447209)
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-31.base" date="1494331200">- Fix generation of PLT entries for s390 binaries.
  (#1440168)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base" date="1498824000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1465318)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.1" date="1502280000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1479773)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.2" date="1511179200">- Fix a seg-fault in the PowerPC linker when discarding .plt sections when -pie is used and undefined weak symbols are present.  
  (#1515347)
- Add SCV, RFSCV amd LNIA instructions to Power9 port of gas.
  (#1449585)</changelog>
</package>
<package pkgid="9e07394ee6af8443134d273db1031cc4d6abd5fa41289d06f9fd57b13fa3b0a0" name="binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.25.1" rel="32.base.el7_4.2"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-23-base" date="1483704000">- Add code to detect attempts to link PIE and non-PIE S390 binaries.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-24-base" date="1483704001">- Fix thinko in previous patch.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-25-base" date="1484568000">- Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
  (#1326710)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-26-base" date="1484568001">- Speed up displaying disassembly when mixed with source code.
  (#1311352)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-27-base" date="1493294400">- Fix infnite loop in linker when counting PowerPC stubs.
  (#1406498)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-28-base" date="1493899200">- Disable fix for 1406430.  It breaks building real s390 executables.
  (#1447209)
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-31.base" date="1494331200">- Fix generation of PLT entries for s390 binaries.
  (#1440168)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base" date="1498824000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1465318)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.1" date="1502280000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1479773)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.2" date="1511179200">- Fix a seg-fault in the PowerPC linker when discarding .plt sections when -pie is used and undefined weak symbols are present.  
  (#1515347)
- Add SCV, RFSCV amd LNIA instructions to Power9 port of gas.
  (#1449585)</changelog>
</package>
<package pkgid="6f0c0dbc5837098a9ceff40b5b6570f5c4711e2b031080566a462f2fcd4eb2ba" name="binutils-devel" arch="i686">
  <version epoch="0" ver="2.25.1" rel="32.base.el7_4.1"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-22-base" date="1470657600">- Fix date format bug in changelog which was preventing package build.</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-23-base" date="1483704000">- Add code to detect attempts to link PIE and non-PIE S390 binaries.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-24-base" date="1483704001">- Fix thinko in previous patch.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-25-base" date="1484568000">- Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
  (#1326710)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-26-base" date="1484568001">- Speed up displaying disassembly when mixed with source code.
  (#1311352)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-27-base" date="1493294400">- Fix infnite loop in linker when counting PowerPC stubs.
  (#1406498)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-28-base" date="1493899200">- Disable fix for 1406430.  It breaks building real s390 executables.
  (#1447209)
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-31.base" date="1494331200">- Fix generation of PLT entries for s390 binaries.
  (#1440168)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base" date="1498824000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1465318)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.1" date="1502280000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1479773)</changelog>
</package>
<package pkgid="acfc135b1eaaa00306e2431f2ec519f2115e93797da1dc9c7361e0cfeda37936" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.25.1" rel="32.base.el7_4.1"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-22-base" date="1470657600">- Fix date format bug in changelog which was preventing package build.</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-23-base" date="1483704000">- Add code to detect attempts to link PIE and non-PIE S390 binaries.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-24-base" date="1483704001">- Fix thinko in previous patch.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-25-base" date="1484568000">- Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
  (#1326710)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-26-base" date="1484568001">- Speed up displaying disassembly when mixed with source code.
  (#1311352)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-27-base" date="1493294400">- Fix infnite loop in linker when counting PowerPC stubs.
  (#1406498)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-28-base" date="1493899200">- Disable fix for 1406430.  It breaks building real s390 executables.
  (#1447209)
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-31.base" date="1494331200">- Fix generation of PLT entries for s390 binaries.
  (#1440168)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base" date="1498824000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1465318)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.1" date="1502280000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1479773)</changelog>
</package>
<package pkgid="0d5f5a0bf2b65cbe70415c42d01e8f371400182cea8fa9dfb82296f44cb53a9e" name="binutils-devel" arch="i686">
  <version epoch="0" ver="2.25.1" rel="32.base.el7_4.2"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-23-base" date="1483704000">- Add code to detect attempts to link PIE and non-PIE S390 binaries.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-24-base" date="1483704001">- Fix thinko in previous patch.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-25-base" date="1484568000">- Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
  (#1326710)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-26-base" date="1484568001">- Speed up displaying disassembly when mixed with source code.
  (#1311352)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-27-base" date="1493294400">- Fix infnite loop in linker when counting PowerPC stubs.
  (#1406498)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-28-base" date="1493899200">- Disable fix for 1406430.  It breaks building real s390 executables.
  (#1447209)
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-31.base" date="1494331200">- Fix generation of PLT entries for s390 binaries.
  (#1440168)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base" date="1498824000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1465318)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.1" date="1502280000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1479773)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.2" date="1511179200">- Fix a seg-fault in the PowerPC linker when discarding .plt sections when -pie is used and undefined weak symbols are present.  
  (#1515347)
- Add SCV, RFSCV amd LNIA instructions to Power9 port of gas.
  (#1449585)</changelog>
</package>
<package pkgid="9360cdf845bb818b9652c66dac9c00c3bb05b54f72961ab515083101f97f9ebb" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.25.1" rel="32.base.el7_4.2"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-23-base" date="1483704000">- Add code to detect attempts to link PIE and non-PIE S390 binaries.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-24-base" date="1483704001">- Fix thinko in previous patch.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-25-base" date="1484568000">- Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
  (#1326710)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-26-base" date="1484568001">- Speed up displaying disassembly when mixed with source code.
  (#1311352)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-27-base" date="1493294400">- Fix infnite loop in linker when counting PowerPC stubs.
  (#1406498)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-28-base" date="1493899200">- Disable fix for 1406430.  It breaks building real s390 executables.
  (#1447209)
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-31.base" date="1494331200">- Fix generation of PLT entries for s390 binaries.
  (#1440168)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base" date="1498824000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1465318)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.1" date="1502280000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1479773)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.2" date="1511179200">- Fix a seg-fault in the PowerPC linker when discarding .plt sections when -pie is used and undefined weak symbols are present.  
  (#1515347)
- Add SCV, RFSCV amd LNIA instructions to Power9 port of gas.
  (#1449585)</changelog>
</package>
<package pkgid="d2ac47b720736a57566614403cbe0a671a7a75825221a0714d50ef9aa7ea3ea5" name="bluez" arch="i686">
  <version epoch="0" ver="5.44" rel="4.el7_4"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; 5.23-1" date="1426766400">- Update to 5.23
- Resolves: #1174545</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; 5.23-2" date="1436356800">- Rebuild against updated libical
- Related: #1209787</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-3" date="1436356801">- Enable hardened build
Resolves: #1174545</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-4" date="1436529600">- Build with --enable-fpie as well
Resolves: #1174545</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.39-1" date="1463572800">- Update to 5.39
Resolves: #1263638 #1296616</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.41-1" date="1470398400">- Update to 5.41
- obexd fixes to prevent crashes
- add /etc/bluetooth/main.conf config file
Resolves: #1313363, #1336476, #1338895</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-1" date="1490097600">- Update to 5.44
- Ship btattach tool
- Configure systemctl settings for bluez-obex correctly
- Add Provides: bluez-obexd
Resolves: #1434581, #1401501</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-2" date="1490616000">- added missing updates for sources and .gitignore
Resolves: #1434581, #1401501</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-3" date="1505131200">- sdpd heap fix
Resolves: #1490010</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-4" date="1505131201">- forgot to bump rev
Resolves: #1490010</changelog>
</package>
<package pkgid="a632f2c8babd75a2eb7834e2e2557131bab1bb976c8d231b78d01dea7bd3d361" name="bluez" arch="src">
  <version epoch="0" ver="5.44" rel="4.el7_4"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; 5.23-1" date="1426766400">- Update to 5.23
- Resolves: #1174545</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; 5.23-2" date="1436356800">- Rebuild against updated libical
- Related: #1209787</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-3" date="1436356801">- Enable hardened build
Resolves: #1174545</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-4" date="1436529600">- Build with --enable-fpie as well
Resolves: #1174545</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.39-1" date="1463572800">- Update to 5.39
Resolves: #1263638 #1296616</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.41-1" date="1470398400">- Update to 5.41
- obexd fixes to prevent crashes
- add /etc/bluetooth/main.conf config file
Resolves: #1313363, #1336476, #1338895</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-1" date="1490097600">- Update to 5.44
- Ship btattach tool
- Configure systemctl settings for bluez-obex correctly
- Add Provides: bluez-obexd
Resolves: #1434581, #1401501</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-2" date="1490616000">- added missing updates for sources and .gitignore
Resolves: #1434581, #1401501</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-3" date="1505131200">- sdpd heap fix
Resolves: #1490010</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-4" date="1505131201">- forgot to bump rev
Resolves: #1490010</changelog>
</package>
<package pkgid="5d1908014aecbe66dc05526b95858bef3626fa02290ef73fefd455277fe2073d" name="bluez" arch="src">
  <version epoch="0" ver="5.44" rel="4.el7_4"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; 5.23-1" date="1426766400">- Update to 5.23
- Resolves: #1174545</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; 5.23-2" date="1436356800">- Rebuild against updated libical
- Related: #1209787</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-3" date="1436356801">- Enable hardened build
Resolves: #1174545</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-4" date="1436529600">- Build with --enable-fpie as well
Resolves: #1174545</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.39-1" date="1463572800">- Update to 5.39
Resolves: #1263638 #1296616</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.41-1" date="1470398400">- Update to 5.41
- obexd fixes to prevent crashes
- add /etc/bluetooth/main.conf config file
Resolves: #1313363, #1336476, #1338895</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-1" date="1490097600">- Update to 5.44
- Ship btattach tool
- Configure systemctl settings for bluez-obex correctly
- Add Provides: bluez-obexd
Resolves: #1434581, #1401501</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-2" date="1490616000">- added missing updates for sources and .gitignore
Resolves: #1434581, #1401501</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-3" date="1505131200">- sdpd heap fix
Resolves: #1490010</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-4" date="1505131201">- forgot to bump rev
Resolves: #1490010</changelog>
</package>
<package pkgid="962759d1df5e090294273f4b44e55ffb67461000c539c58bc69fd66c0c34491e" name="bluez" arch="x86_64">
  <version epoch="0" ver="5.44" rel="4.el7_4"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; 5.23-1" date="1426766400">- Update to 5.23
- Resolves: #1174545</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; 5.23-2" date="1436356800">- Rebuild against updated libical
- Related: #1209787</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-3" date="1436356801">- Enable hardened build
Resolves: #1174545</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-4" date="1436529600">- Build with --enable-fpie as well
Resolves: #1174545</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.39-1" date="1463572800">- Update to 5.39
Resolves: #1263638 #1296616</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.41-1" date="1470398400">- Update to 5.41
- obexd fixes to prevent crashes
- add /etc/bluetooth/main.conf config file
Resolves: #1313363, #1336476, #1338895</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-1" date="1490097600">- Update to 5.44
- Ship btattach tool
- Configure systemctl settings for bluez-obex correctly
- Add Provides: bluez-obexd
Resolves: #1434581, #1401501</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-2" date="1490616000">- added missing updates for sources and .gitignore
Resolves: #1434581, #1401501</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-3" date="1505131200">- sdpd heap fix
Resolves: #1490010</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-4" date="1505131201">- forgot to bump rev
Resolves: #1490010</changelog>
</package>
<package pkgid="b38bd068707b9849461f435f4e43b63d8a22d029e51bf3300a1439e95a874b11" name="bluez-cups" arch="i686">
  <version epoch="0" ver="5.44" rel="4.el7_4"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; 5.23-1" date="1426766400">- Update to 5.23
- Resolves: #1174545</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; 5.23-2" date="1436356800">- Rebuild against updated libical
- Related: #1209787</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-3" date="1436356801">- Enable hardened build
Resolves: #1174545</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-4" date="1436529600">- Build with --enable-fpie as well
Resolves: #1174545</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.39-1" date="1463572800">- Update to 5.39
Resolves: #1263638 #1296616</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.41-1" date="1470398400">- Update to 5.41
- obexd fixes to prevent crashes
- add /etc/bluetooth/main.conf config file
Resolves: #1313363, #1336476, #1338895</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-1" date="1490097600">- Update to 5.44
- Ship btattach tool
- Configure systemctl settings for bluez-obex correctly
- Add Provides: bluez-obexd
Resolves: #1434581, #1401501</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-2" date="1490616000">- added missing updates for sources and .gitignore
Resolves: #1434581, #1401501</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-3" date="1505131200">- sdpd heap fix
Resolves: #1490010</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-4" date="1505131201">- forgot to bump rev
Resolves: #1490010</changelog>
</package>
<package pkgid="271969a1eb80c356dfdb3c76f0e49b5f0c504ba3a654533b48dfb06776e22099" name="bluez-cups" arch="x86_64">
  <version epoch="0" ver="5.44" rel="4.el7_4"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; 5.23-1" date="1426766400">- Update to 5.23
- Resolves: #1174545</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; 5.23-2" date="1436356800">- Rebuild against updated libical
- Related: #1209787</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-3" date="1436356801">- Enable hardened build
Resolves: #1174545</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-4" date="1436529600">- Build with --enable-fpie as well
Resolves: #1174545</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.39-1" date="1463572800">- Update to 5.39
Resolves: #1263638 #1296616</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.41-1" date="1470398400">- Update to 5.41
- obexd fixes to prevent crashes
- add /etc/bluetooth/main.conf config file
Resolves: #1313363, #1336476, #1338895</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-1" date="1490097600">- Update to 5.44
- Ship btattach tool
- Configure systemctl settings for bluez-obex correctly
- Add Provides: bluez-obexd
Resolves: #1434581, #1401501</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-2" date="1490616000">- added missing updates for sources and .gitignore
Resolves: #1434581, #1401501</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-3" date="1505131200">- sdpd heap fix
Resolves: #1490010</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-4" date="1505131201">- forgot to bump rev
Resolves: #1490010</changelog>
</package>
<package pkgid="b07dfaf2a0de96c1fb1ae4f593431d5c53188a725f1c7e63d40174ead225e52f" name="bluez-debuginfo" arch="i686">
  <version epoch="0" ver="5.44" rel="4.el7_4"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; 5.23-1" date="1426766400">- Update to 5.23
- Resolves: #1174545</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; 5.23-2" date="1436356800">- Rebuild against updated libical
- Related: #1209787</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-3" date="1436356801">- Enable hardened build
Resolves: #1174545</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-4" date="1436529600">- Build with --enable-fpie as well
Resolves: #1174545</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.39-1" date="1463572800">- Update to 5.39
Resolves: #1263638 #1296616</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.41-1" date="1470398400">- Update to 5.41
- obexd fixes to prevent crashes
- add /etc/bluetooth/main.conf config file
Resolves: #1313363, #1336476, #1338895</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-1" date="1490097600">- Update to 5.44
- Ship btattach tool
- Configure systemctl settings for bluez-obex correctly
- Add Provides: bluez-obexd
Resolves: #1434581, #1401501</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-2" date="1490616000">- added missing updates for sources and .gitignore
Resolves: #1434581, #1401501</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-3" date="1505131200">- sdpd heap fix
Resolves: #1490010</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-4" date="1505131201">- forgot to bump rev
Resolves: #1490010</changelog>
</package>
<package pkgid="efc913febbbd4bacbdac95f9b6fa476aaaac796552cdfd4dde140ea89b05541a" name="bluez-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.44" rel="4.el7_4"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; 5.23-1" date="1426766400">- Update to 5.23
- Resolves: #1174545</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; 5.23-2" date="1436356800">- Rebuild against updated libical
- Related: #1209787</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-3" date="1436356801">- Enable hardened build
Resolves: #1174545</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-4" date="1436529600">- Build with --enable-fpie as well
Resolves: #1174545</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.39-1" date="1463572800">- Update to 5.39
Resolves: #1263638 #1296616</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.41-1" date="1470398400">- Update to 5.41
- obexd fixes to prevent crashes
- add /etc/bluetooth/main.conf config file
Resolves: #1313363, #1336476, #1338895</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-1" date="1490097600">- Update to 5.44
- Ship btattach tool
- Configure systemctl settings for bluez-obex correctly
- Add Provides: bluez-obexd
Resolves: #1434581, #1401501</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-2" date="1490616000">- added missing updates for sources and .gitignore
Resolves: #1434581, #1401501</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-3" date="1505131200">- sdpd heap fix
Resolves: #1490010</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-4" date="1505131201">- forgot to bump rev
Resolves: #1490010</changelog>
</package>
<package pkgid="1b002994a6afeecde63baab152a10aff62023f283dfa96ac91217160bee7b937" name="bluez-hid2hci" arch="i686">
  <version epoch="0" ver="5.44" rel="4.el7_4"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; 5.23-1" date="1426766400">- Update to 5.23
- Resolves: #1174545</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; 5.23-2" date="1436356800">- Rebuild against updated libical
- Related: #1209787</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-3" date="1436356801">- Enable hardened build
Resolves: #1174545</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-4" date="1436529600">- Build with --enable-fpie as well
Resolves: #1174545</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.39-1" date="1463572800">- Update to 5.39
Resolves: #1263638 #1296616</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.41-1" date="1470398400">- Update to 5.41
- obexd fixes to prevent crashes
- add /etc/bluetooth/main.conf config file
Resolves: #1313363, #1336476, #1338895</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-1" date="1490097600">- Update to 5.44
- Ship btattach tool
- Configure systemctl settings for bluez-obex correctly
- Add Provides: bluez-obexd
Resolves: #1434581, #1401501</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-2" date="1490616000">- added missing updates for sources and .gitignore
Resolves: #1434581, #1401501</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-3" date="1505131200">- sdpd heap fix
Resolves: #1490010</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-4" date="1505131201">- forgot to bump rev
Resolves: #1490010</changelog>
</package>
<package pkgid="ccc527e0e53c5cc6a036129e4f275d6f1784f2f29b67b533803b565714674512" name="bluez-hid2hci" arch="x86_64">
  <version epoch="0" ver="5.44" rel="4.el7_4"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; 5.23-1" date="1426766400">- Update to 5.23
- Resolves: #1174545</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; 5.23-2" date="1436356800">- Rebuild against updated libical
- Related: #1209787</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-3" date="1436356801">- Enable hardened build
Resolves: #1174545</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-4" date="1436529600">- Build with --enable-fpie as well
Resolves: #1174545</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.39-1" date="1463572800">- Update to 5.39
Resolves: #1263638 #1296616</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.41-1" date="1470398400">- Update to 5.41
- obexd fixes to prevent crashes
- add /etc/bluetooth/main.conf config file
Resolves: #1313363, #1336476, #1338895</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-1" date="1490097600">- Update to 5.44
- Ship btattach tool
- Configure systemctl settings for bluez-obex correctly
- Add Provides: bluez-obexd
Resolves: #1434581, #1401501</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-2" date="1490616000">- added missing updates for sources and .gitignore
Resolves: #1434581, #1401501</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-3" date="1505131200">- sdpd heap fix
Resolves: #1490010</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-4" date="1505131201">- forgot to bump rev
Resolves: #1490010</changelog>
</package>
<package pkgid="7fc30ac0a6eb9066688f9ace2e6433f0dde4a96b719cd77da1f5677d8ceeeb51" name="bluez-libs" arch="i686">
  <version epoch="0" ver="5.44" rel="4.el7_4"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; 5.23-1" date="1426766400">- Update to 5.23
- Resolves: #1174545</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; 5.23-2" date="1436356800">- Rebuild against updated libical
- Related: #1209787</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-3" date="1436356801">- Enable hardened build
Resolves: #1174545</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-4" date="1436529600">- Build with --enable-fpie as well
Resolves: #1174545</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.39-1" date="1463572800">- Update to 5.39
Resolves: #1263638 #1296616</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.41-1" date="1470398400">- Update to 5.41
- obexd fixes to prevent crashes
- add /etc/bluetooth/main.conf config file
Resolves: #1313363, #1336476, #1338895</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-1" date="1490097600">- Update to 5.44
- Ship btattach tool
- Configure systemctl settings for bluez-obex correctly
- Add Provides: bluez-obexd
Resolves: #1434581, #1401501</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-2" date="1490616000">- added missing updates for sources and .gitignore
Resolves: #1434581, #1401501</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-3" date="1505131200">- sdpd heap fix
Resolves: #1490010</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-4" date="1505131201">- forgot to bump rev
Resolves: #1490010</changelog>
</package>
<package pkgid="fc0f27bcbb2f4dbda3e27b42d89167a03a90927786f7b3ed93e5e140af38dd70" name="bluez-libs" arch="x86_64">
  <version epoch="0" ver="5.44" rel="4.el7_4"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; 5.23-1" date="1426766400">- Update to 5.23
- Resolves: #1174545</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; 5.23-2" date="1436356800">- Rebuild against updated libical
- Related: #1209787</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-3" date="1436356801">- Enable hardened build
Resolves: #1174545</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-4" date="1436529600">- Build with --enable-fpie as well
Resolves: #1174545</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.39-1" date="1463572800">- Update to 5.39
Resolves: #1263638 #1296616</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.41-1" date="1470398400">- Update to 5.41
- obexd fixes to prevent crashes
- add /etc/bluetooth/main.conf config file
Resolves: #1313363, #1336476, #1338895</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-1" date="1490097600">- Update to 5.44
- Ship btattach tool
- Configure systemctl settings for bluez-obex correctly
- Add Provides: bluez-obexd
Resolves: #1434581, #1401501</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-2" date="1490616000">- added missing updates for sources and .gitignore
Resolves: #1434581, #1401501</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-3" date="1505131200">- sdpd heap fix
Resolves: #1490010</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-4" date="1505131201">- forgot to bump rev
Resolves: #1490010</changelog>
</package>
<package pkgid="11ebff29df4de0a7b4227353e50e02ba1eb8a87a4df3e8774e696c3a847d56b1" name="bluez-libs-devel" arch="i686">
  <version epoch="0" ver="5.44" rel="4.el7_4"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; 5.23-1" date="1426766400">- Update to 5.23
- Resolves: #1174545</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; 5.23-2" date="1436356800">- Rebuild against updated libical
- Related: #1209787</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-3" date="1436356801">- Enable hardened build
Resolves: #1174545</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-4" date="1436529600">- Build with --enable-fpie as well
Resolves: #1174545</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.39-1" date="1463572800">- Update to 5.39
Resolves: #1263638 #1296616</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.41-1" date="1470398400">- Update to 5.41
- obexd fixes to prevent crashes
- add /etc/bluetooth/main.conf config file
Resolves: #1313363, #1336476, #1338895</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-1" date="1490097600">- Update to 5.44
- Ship btattach tool
- Configure systemctl settings for bluez-obex correctly
- Add Provides: bluez-obexd
Resolves: #1434581, #1401501</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-2" date="1490616000">- added missing updates for sources and .gitignore
Resolves: #1434581, #1401501</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-3" date="1505131200">- sdpd heap fix
Resolves: #1490010</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-4" date="1505131201">- forgot to bump rev
Resolves: #1490010</changelog>
</package>
<package pkgid="253237518720b0e501ca98503c58612c2a5b55dc2633546d686f12829ae99b7d" name="bluez-libs-devel" arch="x86_64">
  <version epoch="0" ver="5.44" rel="4.el7_4"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; 5.23-1" date="1426766400">- Update to 5.23
- Resolves: #1174545</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; 5.23-2" date="1436356800">- Rebuild against updated libical
- Related: #1209787</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-3" date="1436356801">- Enable hardened build
Resolves: #1174545</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-4" date="1436529600">- Build with --enable-fpie as well
Resolves: #1174545</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.39-1" date="1463572800">- Update to 5.39
Resolves: #1263638 #1296616</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.41-1" date="1470398400">- Update to 5.41
- obexd fixes to prevent crashes
- add /etc/bluetooth/main.conf config file
Resolves: #1313363, #1336476, #1338895</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-1" date="1490097600">- Update to 5.44
- Ship btattach tool
- Configure systemctl settings for bluez-obex correctly
- Add Provides: bluez-obexd
Resolves: #1434581, #1401501</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-2" date="1490616000">- added missing updates for sources and .gitignore
Resolves: #1434581, #1401501</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-3" date="1505131200">- sdpd heap fix
Resolves: #1490010</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-4" date="1505131201">- forgot to bump rev
Resolves: #1490010</changelog>
</package>
<package pkgid="c8afbdd13fb940cce1b87e8494e39effd248967f5050333c593d7759399bb5d4" name="cloud-init" arch="i686">
  <version epoch="0" ver="0.7.9" rel="9.el7.centos.1"/>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-2" date="1484654400">- use timeout from datasource config in openstack get_data (rhbz#1408589)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-3" date="1488888000">- fixes for network config generation
- avoid dependency cycle at boot (rhbz#1420946)</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; 0.7.9-4" date="1492084800">- Import to RHEL 7
Resolves: rhbz#1427280</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-5" date="1494417600">- systemd: replace generator with unit conditionals (rhbz#1440831)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-6" date="1494417601">- add power-state-change module to cloud_final_modules (rhbz#1252477)
- remove 'tee' command from logging configuration (rhbz#1424612)
- limit permissions on def_log_file (rhbz#1424612)
- Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
- OpenStack: add 'dvs' to the list of physical link types. (rhbz#1442783)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-7" date="1495454400">- Add missing sysconfig unit test data (rhbz#1438082)
- Fix dual stack IPv4/IPv6 configuration for RHEL (rhbz#1438082)
- sysconfig: Raise ValueError when multiple default gateways are present. (rhbz#1438082)
- Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
- Do not write NM_CONTROLLED=no in generated interface config files (rhbz#1385172)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-8" date="1495540800">- Update patches</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-9" date="1498132800">- RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration. (rhbz#1438082)
- azure: ensure that networkmanager hook script runs (rhbz#1440831 rhbz#1460206)
- Fix ipv6 subnet detection (rhbz#1438082)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.1" date="1506427200">- Support AliCloud datasource (rhbz#1496113)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 0.7.9-9.1" date="1508414400">- Roll in CentOS Branding
- set default user to centos
- assume Red Hat compatibility</changelog>
</package>
<package pkgid="6efe341b20a19aeeb5c95f215b1723fba4ae9f3430b0d34ad12af79cdeeaded2" name="cloud-init" arch="src">
  <version epoch="0" ver="0.7.9" rel="9.el7.centos.1"/>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-2" date="1484654400">- use timeout from datasource config in openstack get_data (rhbz#1408589)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-3" date="1488888000">- fixes for network config generation
- avoid dependency cycle at boot (rhbz#1420946)</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; 0.7.9-4" date="1492084800">- Import to RHEL 7
Resolves: rhbz#1427280</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-5" date="1494417600">- systemd: replace generator with unit conditionals (rhbz#1440831)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-6" date="1494417601">- add power-state-change module to cloud_final_modules (rhbz#1252477)
- remove 'tee' command from logging configuration (rhbz#1424612)
- limit permissions on def_log_file (rhbz#1424612)
- Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
- OpenStack: add 'dvs' to the list of physical link types. (rhbz#1442783)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-7" date="1495454400">- Add missing sysconfig unit test data (rhbz#1438082)
- Fix dual stack IPv4/IPv6 configuration for RHEL (rhbz#1438082)
- sysconfig: Raise ValueError when multiple default gateways are present. (rhbz#1438082)
- Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
- Do not write NM_CONTROLLED=no in generated interface config files (rhbz#1385172)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-8" date="1495540800">- Update patches</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-9" date="1498132800">- RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration. (rhbz#1438082)
- azure: ensure that networkmanager hook script runs (rhbz#1440831 rhbz#1460206)
- Fix ipv6 subnet detection (rhbz#1438082)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.1" date="1506427200">- Support AliCloud datasource (rhbz#1496113)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 0.7.9-9.1" date="1508414400">- Roll in CentOS Branding
- set default user to centos
- assume Red Hat compatibility</changelog>
</package>
<package pkgid="f9976754438a9e317b66d66a64fa2d9582b834b605f5c00f7f4eb9bbc07ddb0d" name="cloud-init" arch="src">
  <version epoch="0" ver="0.7.9" rel="9.el7.centos.1"/>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-2" date="1484654400">- use timeout from datasource config in openstack get_data (rhbz#1408589)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-3" date="1488888000">- fixes for network config generation
- avoid dependency cycle at boot (rhbz#1420946)</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; 0.7.9-4" date="1492084800">- Import to RHEL 7
Resolves: rhbz#1427280</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-5" date="1494417600">- systemd: replace generator with unit conditionals (rhbz#1440831)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-6" date="1494417601">- add power-state-change module to cloud_final_modules (rhbz#1252477)
- remove 'tee' command from logging configuration (rhbz#1424612)
- limit permissions on def_log_file (rhbz#1424612)
- Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
- OpenStack: add 'dvs' to the list of physical link types. (rhbz#1442783)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-7" date="1495454400">- Add missing sysconfig unit test data (rhbz#1438082)
- Fix dual stack IPv4/IPv6 configuration for RHEL (rhbz#1438082)
- sysconfig: Raise ValueError when multiple default gateways are present. (rhbz#1438082)
- Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
- Do not write NM_CONTROLLED=no in generated interface config files (rhbz#1385172)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-8" date="1495540800">- Update patches</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-9" date="1498132800">- RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration. (rhbz#1438082)
- azure: ensure that networkmanager hook script runs (rhbz#1440831 rhbz#1460206)
- Fix ipv6 subnet detection (rhbz#1438082)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.1" date="1506427200">- Support AliCloud datasource (rhbz#1496113)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 0.7.9-9.1" date="1508414400">- Roll in CentOS Branding
- set default user to centos
- assume Red Hat compatibility</changelog>
</package>
<package pkgid="521a78414c2c641de38b48e254a873b79c71fea3605b4f017ef628b0ac808733" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="0.7.9" rel="9.el7.centos.1"/>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-2" date="1484654400">- use timeout from datasource config in openstack get_data (rhbz#1408589)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-3" date="1488888000">- fixes for network config generation
- avoid dependency cycle at boot (rhbz#1420946)</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; 0.7.9-4" date="1492084800">- Import to RHEL 7
Resolves: rhbz#1427280</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-5" date="1494417600">- systemd: replace generator with unit conditionals (rhbz#1440831)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-6" date="1494417601">- add power-state-change module to cloud_final_modules (rhbz#1252477)
- remove 'tee' command from logging configuration (rhbz#1424612)
- limit permissions on def_log_file (rhbz#1424612)
- Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
- OpenStack: add 'dvs' to the list of physical link types. (rhbz#1442783)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-7" date="1495454400">- Add missing sysconfig unit test data (rhbz#1438082)
- Fix dual stack IPv4/IPv6 configuration for RHEL (rhbz#1438082)
- sysconfig: Raise ValueError when multiple default gateways are present. (rhbz#1438082)
- Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
- Do not write NM_CONTROLLED=no in generated interface config files (rhbz#1385172)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-8" date="1495540800">- Update patches</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-9" date="1498132800">- RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration. (rhbz#1438082)
- azure: ensure that networkmanager hook script runs (rhbz#1440831 rhbz#1460206)
- Fix ipv6 subnet detection (rhbz#1438082)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.1" date="1506427200">- Support AliCloud datasource (rhbz#1496113)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 0.7.9-9.1" date="1508414400">- Roll in CentOS Branding
- set default user to centos
- assume Red Hat compatibility</changelog>
</package>
<package pkgid="d2873e50eafa2fde40b725bd89d8008deeaf70aeff763ce9caa608c818cc44a9" name="cloud-init" arch="i686">
  <version epoch="0" ver="0.7.9" rel="9.el7.centos.2"/>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-3" date="1488888000">- fixes for network config generation
- avoid dependency cycle at boot (rhbz#1420946)</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; 0.7.9-4" date="1492084800">- Import to RHEL 7
Resolves: rhbz#1427280</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-5" date="1494417600">- systemd: replace generator with unit conditionals (rhbz#1440831)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-6" date="1494417601">- add power-state-change module to cloud_final_modules (rhbz#1252477)
- remove 'tee' command from logging configuration (rhbz#1424612)
- limit permissions on def_log_file (rhbz#1424612)
- Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
- OpenStack: add 'dvs' to the list of physical link types. (rhbz#1442783)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-7" date="1495454400">- Add missing sysconfig unit test data (rhbz#1438082)
- Fix dual stack IPv4/IPv6 configuration for RHEL (rhbz#1438082)
- sysconfig: Raise ValueError when multiple default gateways are present. (rhbz#1438082)
- Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
- Do not write NM_CONTROLLED=no in generated interface config files (rhbz#1385172)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-8" date="1495540800">- Update patches</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-9" date="1498132800">- RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration. (rhbz#1438082)
- azure: ensure that networkmanager hook script runs (rhbz#1440831 rhbz#1460206)
- Fix ipv6 subnet detection (rhbz#1438082)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.1" date="1506427200">- Support AliCloud datasource (rhbz#1496113)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.2" date="1513857600">- Prevent Azure NM and dhclient hooks from running when cloud-init is
  disabled (rhbz#1530127)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;  0.7.9-9.2" date="1516881600">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="3df4b3a5c306fb1f3d1b19a274b3c78062c8f95f91ed4533bfff246e810c424b" name="cloud-init" arch="src">
  <version epoch="0" ver="0.7.9" rel="9.el7.centos.2"/>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-3" date="1488888000">- fixes for network config generation
- avoid dependency cycle at boot (rhbz#1420946)</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; 0.7.9-4" date="1492084800">- Import to RHEL 7
Resolves: rhbz#1427280</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-5" date="1494417600">- systemd: replace generator with unit conditionals (rhbz#1440831)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-6" date="1494417601">- add power-state-change module to cloud_final_modules (rhbz#1252477)
- remove 'tee' command from logging configuration (rhbz#1424612)
- limit permissions on def_log_file (rhbz#1424612)
- Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
- OpenStack: add 'dvs' to the list of physical link types. (rhbz#1442783)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-7" date="1495454400">- Add missing sysconfig unit test data (rhbz#1438082)
- Fix dual stack IPv4/IPv6 configuration for RHEL (rhbz#1438082)
- sysconfig: Raise ValueError when multiple default gateways are present. (rhbz#1438082)
- Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
- Do not write NM_CONTROLLED=no in generated interface config files (rhbz#1385172)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-8" date="1495540800">- Update patches</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-9" date="1498132800">- RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration. (rhbz#1438082)
- azure: ensure that networkmanager hook script runs (rhbz#1440831 rhbz#1460206)
- Fix ipv6 subnet detection (rhbz#1438082)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.1" date="1506427200">- Support AliCloud datasource (rhbz#1496113)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.2" date="1513857600">- Prevent Azure NM and dhclient hooks from running when cloud-init is
  disabled (rhbz#1530127)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;  0.7.9-9.2" date="1516881600">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="2d514271e2d98778bcf9cad7fed2f86ad3fbb36ddc0ba779ca7a840ccaa68daa" name="cloud-init" arch="src">
  <version epoch="0" ver="0.7.9" rel="9.el7.centos.2"/>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-3" date="1488888000">- fixes for network config generation
- avoid dependency cycle at boot (rhbz#1420946)</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; 0.7.9-4" date="1492084800">- Import to RHEL 7
Resolves: rhbz#1427280</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-5" date="1494417600">- systemd: replace generator with unit conditionals (rhbz#1440831)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-6" date="1494417601">- add power-state-change module to cloud_final_modules (rhbz#1252477)
- remove 'tee' command from logging configuration (rhbz#1424612)
- limit permissions on def_log_file (rhbz#1424612)
- Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
- OpenStack: add 'dvs' to the list of physical link types. (rhbz#1442783)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-7" date="1495454400">- Add missing sysconfig unit test data (rhbz#1438082)
- Fix dual stack IPv4/IPv6 configuration for RHEL (rhbz#1438082)
- sysconfig: Raise ValueError when multiple default gateways are present. (rhbz#1438082)
- Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
- Do not write NM_CONTROLLED=no in generated interface config files (rhbz#1385172)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-8" date="1495540800">- Update patches</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-9" date="1498132800">- RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration. (rhbz#1438082)
- azure: ensure that networkmanager hook script runs (rhbz#1440831 rhbz#1460206)
- Fix ipv6 subnet detection (rhbz#1438082)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.1" date="1506427200">- Support AliCloud datasource (rhbz#1496113)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.2" date="1513857600">- Prevent Azure NM and dhclient hooks from running when cloud-init is
  disabled (rhbz#1530127)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;  0.7.9-9.2" date="1516881600">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="f3d2138410c0a5b20af4d8922406a31f113abbc5a1ea8a1bc09b5e7789af56c7" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="0.7.9" rel="9.el7.centos.2"/>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-3" date="1488888000">- fixes for network config generation
- avoid dependency cycle at boot (rhbz#1420946)</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; 0.7.9-4" date="1492084800">- Import to RHEL 7
Resolves: rhbz#1427280</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-5" date="1494417600">- systemd: replace generator with unit conditionals (rhbz#1440831)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-6" date="1494417601">- add power-state-change module to cloud_final_modules (rhbz#1252477)
- remove 'tee' command from logging configuration (rhbz#1424612)
- limit permissions on def_log_file (rhbz#1424612)
- Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
- OpenStack: add 'dvs' to the list of physical link types. (rhbz#1442783)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-7" date="1495454400">- Add missing sysconfig unit test data (rhbz#1438082)
- Fix dual stack IPv4/IPv6 configuration for RHEL (rhbz#1438082)
- sysconfig: Raise ValueError when multiple default gateways are present. (rhbz#1438082)
- Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
- Do not write NM_CONTROLLED=no in generated interface config files (rhbz#1385172)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-8" date="1495540800">- Update patches</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-9" date="1498132800">- RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration. (rhbz#1438082)
- azure: ensure that networkmanager hook script runs (rhbz#1440831 rhbz#1460206)
- Fix ipv6 subnet detection (rhbz#1438082)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.1" date="1506427200">- Support AliCloud datasource (rhbz#1496113)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.2" date="1513857600">- Prevent Azure NM and dhclient hooks from running when cloud-init is
  disabled (rhbz#1530127)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;  0.7.9-9.2" date="1516881600">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="fe264870029b0b68b7858ba831f130d0e41807503df0bad882d391b46646cbe4" name="cloud-init" arch="i686">
  <version epoch="0" ver="0.7.9" rel="9.el7.centos.6"/>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-7" date="1495454400">- Add missing sysconfig unit test data (rhbz#1438082)
- Fix dual stack IPv4/IPv6 configuration for RHEL (rhbz#1438082)
- sysconfig: Raise ValueError when multiple default gateways are present. (rhbz#1438082)
- Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
- Do not write NM_CONTROLLED=no in generated interface config files (rhbz#1385172)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-8" date="1495540800">- Update patches</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-9" date="1498132800">- RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration. (rhbz#1438082)
- azure: ensure that networkmanager hook script runs (rhbz#1440831 rhbz#1460206)
- Fix ipv6 subnet detection (rhbz#1438082)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.1" date="1506427200">- Support AliCloud datasource (rhbz#1496113)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.2" date="1513857600">- Prevent Azure NM and dhclient hooks from running when cloud-init is
  disabled (rhbz#1530127)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.3" date="1516622400">- Disable NetworkManager management of resolv.conf if nameservers
  are specified by configuration.
  Resolves: rhbz#1537439</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.4" date="1517313600">- sysconfig: Fix rendering of default gateway for ipv4
  Resolves: rhbz#1540094
- sysconfig: Correct rendering for dhcp on ipv6
  Resolves: rhbz#1540093</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.5" date="1517572800">- sysconfig: Fix rendering of default gateway for ipv6
  Resolves: rhbz#1540094</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.6" date="1518696000">- Correctly render DNS and DOMAIN for sysconfig
  Resolves: rhbz#1545525</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 0.7.9-9.6" date="1520424000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="f1d6ee23964d0bf1ee70963905842620d782bd8fed9e68e99e40defbc25e5dc0" name="cloud-init" arch="src">
  <version epoch="0" ver="0.7.9" rel="9.el7.centos.6"/>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-7" date="1495454400">- Add missing sysconfig unit test data (rhbz#1438082)
- Fix dual stack IPv4/IPv6 configuration for RHEL (rhbz#1438082)
- sysconfig: Raise ValueError when multiple default gateways are present. (rhbz#1438082)
- Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
- Do not write NM_CONTROLLED=no in generated interface config files (rhbz#1385172)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-8" date="1495540800">- Update patches</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-9" date="1498132800">- RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration. (rhbz#1438082)
- azure: ensure that networkmanager hook script runs (rhbz#1440831 rhbz#1460206)
- Fix ipv6 subnet detection (rhbz#1438082)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.1" date="1506427200">- Support AliCloud datasource (rhbz#1496113)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.2" date="1513857600">- Prevent Azure NM and dhclient hooks from running when cloud-init is
  disabled (rhbz#1530127)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.3" date="1516622400">- Disable NetworkManager management of resolv.conf if nameservers
  are specified by configuration.
  Resolves: rhbz#1537439</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.4" date="1517313600">- sysconfig: Fix rendering of default gateway for ipv4
  Resolves: rhbz#1540094
- sysconfig: Correct rendering for dhcp on ipv6
  Resolves: rhbz#1540093</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.5" date="1517572800">- sysconfig: Fix rendering of default gateway for ipv6
  Resolves: rhbz#1540094</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.6" date="1518696000">- Correctly render DNS and DOMAIN for sysconfig
  Resolves: rhbz#1545525</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 0.7.9-9.6" date="1520424000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="7d65018c4faea065045943d559c681d437b69e92f7d98a785a8cd116e0b5bc29" name="cloud-init" arch="src">
  <version epoch="0" ver="0.7.9" rel="9.el7.centos.6"/>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-7" date="1495454400">- Add missing sysconfig unit test data (rhbz#1438082)
- Fix dual stack IPv4/IPv6 configuration for RHEL (rhbz#1438082)
- sysconfig: Raise ValueError when multiple default gateways are present. (rhbz#1438082)
- Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
- Do not write NM_CONTROLLED=no in generated interface config files (rhbz#1385172)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-8" date="1495540800">- Update patches</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-9" date="1498132800">- RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration. (rhbz#1438082)
- azure: ensure that networkmanager hook script runs (rhbz#1440831 rhbz#1460206)
- Fix ipv6 subnet detection (rhbz#1438082)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.1" date="1506427200">- Support AliCloud datasource (rhbz#1496113)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.2" date="1513857600">- Prevent Azure NM and dhclient hooks from running when cloud-init is
  disabled (rhbz#1530127)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.3" date="1516622400">- Disable NetworkManager management of resolv.conf if nameservers
  are specified by configuration.
  Resolves: rhbz#1537439</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.4" date="1517313600">- sysconfig: Fix rendering of default gateway for ipv4
  Resolves: rhbz#1540094
- sysconfig: Correct rendering for dhcp on ipv6
  Resolves: rhbz#1540093</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.5" date="1517572800">- sysconfig: Fix rendering of default gateway for ipv6
  Resolves: rhbz#1540094</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.6" date="1518696000">- Correctly render DNS and DOMAIN for sysconfig
  Resolves: rhbz#1545525</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 0.7.9-9.6" date="1520424000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="cc91e3e09993b4f9f9fa4ca53b6d1f2c67891d71098a49f4b212bfefab4ef27c" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="0.7.9" rel="9.el7.centos.6"/>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-7" date="1495454400">- Add missing sysconfig unit test data (rhbz#1438082)
- Fix dual stack IPv4/IPv6 configuration for RHEL (rhbz#1438082)
- sysconfig: Raise ValueError when multiple default gateways are present. (rhbz#1438082)
- Bounce network interface for Azure when using the built-in path. (rhbz#1434109)
- Do not write NM_CONTROLLED=no in generated interface config files (rhbz#1385172)</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-8" date="1495540800">- Update patches</changelog>
  <changelog author="Lars Kellogg-Stedman &lt;lars@redhat.com&gt; 0.7.9-9" date="1498132800">- RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration. (rhbz#1438082)
- azure: ensure that networkmanager hook script runs (rhbz#1440831 rhbz#1460206)
- Fix ipv6 subnet detection (rhbz#1438082)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.1" date="1506427200">- Support AliCloud datasource (rhbz#1496113)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.2" date="1513857600">- Prevent Azure NM and dhclient hooks from running when cloud-init is
  disabled (rhbz#1530127)</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.3" date="1516622400">- Disable NetworkManager management of resolv.conf if nameservers
  are specified by configuration.
  Resolves: rhbz#1537439</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.4" date="1517313600">- sysconfig: Fix rendering of default gateway for ipv4
  Resolves: rhbz#1540094
- sysconfig: Correct rendering for dhcp on ipv6
  Resolves: rhbz#1540093</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.5" date="1517572800">- sysconfig: Fix rendering of default gateway for ipv6
  Resolves: rhbz#1540094</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-9.6" date="1518696000">- Correctly render DNS and DOMAIN for sysconfig
  Resolves: rhbz#1545525</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 0.7.9-9.6" date="1520424000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="fa57fdd4221cee4a9887db7c65a9339ef7249ca5edc5e7342d4307395fd28dcc" name="cockpit" arch="i686">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="334d9083c58436b7d7df1e4e268a378c041f74ba334aefe8c7e907fd64dcaf25" name="cockpit" arch="src">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="e847b997f7626dec9890c40f9816a348a79945f95ce8d6a4c245ef081c165770" name="cockpit" arch="src">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="ddd88977e9d7e68cf56420406eb59e8e20a4559a9d157e7d627ef37fa29138de" name="cockpit" arch="x86_64">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="c8d4a108855294c4cf9c88d1f3e65213b4b654628d7f7aaba954ac82677d0b44" name="cockpit-bridge" arch="i686">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="9b126c191c3574710ca76e33bf14576f2bc6d0c1fe83dfac159cc141d812bb24" name="cockpit-bridge" arch="x86_64">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="421ade0234688560546c06f0350127ecf63f6a68c92b783e8349e049e995674c" name="cockpit-debuginfo" arch="i686">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="619202c13118624033e9b28b73a950b7b23f4ad1018824c34a5fd115ee953dfa" name="cockpit-debuginfo" arch="x86_64">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="0c18c5988146824c87419a846ca85876659f3c71e06a0ff9ca466b5cdbdec322" name="cockpit-doc" arch="i686">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="2c2ee053956378c979a27e8ebe8356526a88488c7dafd20a26f3692fb040ad8e" name="cockpit-doc" arch="x86_64">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="cea7f796a166eb92f9cf7e2be1eb3edb4c57b340aaa040df5c72cd77139f161e" name="cockpit-docker" arch="x86_64">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="fa1b4b77aff76412e075fd8e299f5d3fdb9f928583f8e29e99bfb82fd288889a" name="cockpit-kdump" arch="noarch">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="ca5b91191246b20e5d448e070ff964585e4a2d521fb83bf868129be3b092cd5c" name="cockpit-kdump" arch="noarch">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="3c9bfca0bdcaceafcd0f5cdab5c2083dae64a3fe3daa4799b9b2dd2ee5f29cbb" name="cockpit-kubernetes" arch="x86_64">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="526c1e00268cb1162aeb236ec755f544a82fa415bd423a1eafc82b47e6ec4755" name="cockpit-machines" arch="i686">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="d65f0b240bf5afa21f43813af147b8b093f7d8f5799f6b62d751f159ba03aae0" name="cockpit-machines" arch="x86_64">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="4b6e3c2de7d9f498029b1cb302c62ddd03b3f506a7452d52c71d0194c497dce9" name="cockpit-networkmanager" arch="noarch">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="d241ec3b97afaa3567ede9fad1c59d53af7759011b0f12c5760de6f6cf8d5215" name="cockpit-networkmanager" arch="noarch">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="47cc25485e57446914b8ccd2c81b990ae61559b36967f2de60075928ce47c372" name="cockpit-ostree" arch="i686">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="02408eb45923a4a601b850e87ecc2ce47aff1b0b7426dfd936d77a79b057dd35" name="cockpit-ostree" arch="x86_64">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="a898c1a40650f9764e8faf30d3eb304bc96b92c22d6c470387bd2dc4e6e053e8" name="cockpit-pcp" arch="i686">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="55226def0d257d347fc4724e4f11e843dd487134a2a20311d29ff69ca36f985a" name="cockpit-pcp" arch="x86_64">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="429560f0bd7cef63e431f417de9e9952fab10444ff403e37cd5cab421d80d7e1" name="cockpit-sosreport" arch="noarch">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="646f8895fcc6eab9cf561a0f0ed7fd3a753e0fab4beed22529c27a61d6ca91a8" name="cockpit-sosreport" arch="noarch">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="d3685850a88c9f183bfdb19f4c24a1e45e88bdbb3d2526684a11de31e51840a5" name="cockpit-storaged" arch="noarch">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="59024894881a864e8865d83469ce1b769faed514be1012a82a4001c629d4a80c" name="cockpit-storaged" arch="noarch">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="2f9484cb088dfe570d2217fea30596acdd5979c170061cd4a09ab18045b66cba" name="cockpit-subscriptions" arch="noarch">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="5dbb1d12c6357bfdf5e11b96cd2e4c6a491f9c34c7b77798cca327781f591b6f" name="cockpit-subscriptions" arch="noarch">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="2499e658cd9b4c06509dab07eafcc9a789c4d92908c6fd70779c2d00c2cdb79a" name="cockpit-system" arch="noarch">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="c3884adfec7e2807b2bf2e18265dcc019177d7fbc71134972ff9e1a9bd7f750f" name="cockpit-system" arch="noarch">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="d05e067bf8eda0a42f2c73614cbab7004a7f305715b18634527525a7b1055ed5" name="cockpit-tests" arch="i686">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="2f7750efd71b13eb2d92a2b23cf057f20ccfc8d5ba7b773cb5986b76acc6e491" name="cockpit-tests" arch="x86_64">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="5c51962a2fa2b90cb256c175e02e5ab27e757756a7c9c7142a7e0502a7c879aa" name="cockpit-ws" arch="i686">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="91e721b9774aec0aac60ff415e380e311910531710058900a591611ebe174f4a" name="cockpit-ws" arch="x86_64">
  <version epoch="0" ver="138" rel="10.el7_4"/>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-1" date="1491825600">- Update to 138 release
- Simplify protocol that cockpit talks to session authentication processes</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-2" date="1493726400">- Bump and rebuild with dashboard</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-3" date="1493812800">- Fix issues with connections between multiple hosts
- Fix format string type mismatch on some architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-4" date="1493985600">- Bump and rebuild on more architectures</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-5" date="1494590400">- Fix forwarding binary data in the shell
- Fix dashboard dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-6" date="1495022400">- Fix ssh dependency</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-7" date="1495022401">- Build cockpit-docker for s390x</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-8" date="1495627200">- Rebuild for new dependencies</changelog>
  <changelog author="Dominik Perpeet &lt;dperpeet@redhat.com&gt; 138-9" date="1498132800">- Add Japanese translation rhbz#1461085</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; 138-10" date="1505908800">- Backport upstream patches to fix integration tests
- Fix unit test failure in mock with nspawn
- Fix created timer units so that they can actually get enabled and started
  rhbz#1478832
- Fix connecting to remote servers with non-standard ssh port rhbz#1478828</changelog>
</package>
<package pkgid="c3e4060e1d2809aef4ddf277a4a2e4ab3873353725749eb84674cb8d009c6cd2" name="copy-jdk-configs" arch="noarch">
  <version epoch="0" ver="2.2" rel="5.el7_4"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-3" date="1452254400">- pretrasn lua call now done in pcall (protected call)
- also posttrans now always return 0</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-3" date="1460462400">- inital commit to rhel
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-3" date="1460462401">- commented requires on lua posix to stop blocking composes.
- changed it to 644 to dont mislead by executable flags
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-5" date="1468324800">- posttrans silenced, the error is appearing only in state, when there is nothing to copy
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2-1" date="1470744000">- updated to 1,3 which fixing nss minor issue
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3-1" date="1480593600">- updated to upstream 1.3 (adding jre/lib/security/cacerts file)
- Resolves: rhbz#1399719</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-1" date="1497355200">- added "jre/lib/security/blacklisted.certs" to cared files
- moved to newest release 2.1
- moved to new upstream at pagure.io
- added new script of copy_jdk_configs_fixFiles.sh 
- copy_jdk_configs.lua  aligned to it
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-3" date="1497873600">- updated to latest head
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-4" date="1510833600">- added an daplied in install patch1: newPolices.patch
- Resolves: rhbz#1513697</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-5" date="1511265600">- adapted (added policy subdir) patch1: newPolices.patch
- Resolves: rhbz#1513697</changelog>
</package>
<package pkgid="2bcc53d692888513eac20e54fb2ca68fb2dfb0321d4e8311f8f30256a7ca21ea" name="copy-jdk-configs" arch="noarch">
  <version epoch="0" ver="2.2" rel="5.el7_4"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-3" date="1452254400">- pretrasn lua call now done in pcall (protected call)
- also posttrans now always return 0</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-3" date="1460462400">- inital commit to rhel
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-3" date="1460462401">- commented requires on lua posix to stop blocking composes.
- changed it to 644 to dont mislead by executable flags
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-5" date="1468324800">- posttrans silenced, the error is appearing only in state, when there is nothing to copy
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2-1" date="1470744000">- updated to 1,3 which fixing nss minor issue
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3-1" date="1480593600">- updated to upstream 1.3 (adding jre/lib/security/cacerts file)
- Resolves: rhbz#1399719</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-1" date="1497355200">- added "jre/lib/security/blacklisted.certs" to cared files
- moved to newest release 2.1
- moved to new upstream at pagure.io
- added new script of copy_jdk_configs_fixFiles.sh 
- copy_jdk_configs.lua  aligned to it
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-3" date="1497873600">- updated to latest head
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-4" date="1510833600">- added an daplied in install patch1: newPolices.patch
- Resolves: rhbz#1513697</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-5" date="1511265600">- adapted (added policy subdir) patch1: newPolices.patch
- Resolves: rhbz#1513697</changelog>
</package>
<package pkgid="2d94bfa87dcc496e0aec8ae42874f85e355d8ba00a7a1536da730d93fbd2a1d5" name="copy-jdk-configs" arch="src">
  <version epoch="0" ver="2.2" rel="5.el7_4"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-3" date="1452254400">- pretrasn lua call now done in pcall (protected call)
- also posttrans now always return 0</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-3" date="1460462400">- inital commit to rhel
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-3" date="1460462401">- commented requires on lua posix to stop blocking composes.
- changed it to 644 to dont mislead by executable flags
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-5" date="1468324800">- posttrans silenced, the error is appearing only in state, when there is nothing to copy
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2-1" date="1470744000">- updated to 1,3 which fixing nss minor issue
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3-1" date="1480593600">- updated to upstream 1.3 (adding jre/lib/security/cacerts file)
- Resolves: rhbz#1399719</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-1" date="1497355200">- added "jre/lib/security/blacklisted.certs" to cared files
- moved to newest release 2.1
- moved to new upstream at pagure.io
- added new script of copy_jdk_configs_fixFiles.sh 
- copy_jdk_configs.lua  aligned to it
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-3" date="1497873600">- updated to latest head
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-4" date="1510833600">- added an daplied in install patch1: newPolices.patch
- Resolves: rhbz#1513697</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-5" date="1511265600">- adapted (added policy subdir) patch1: newPolices.patch
- Resolves: rhbz#1513697</changelog>
</package>
<package pkgid="97a781c1212d6e28ce1fc8ae9060e0a6459ed731c028f4dea1824f1a00e23cf4" name="copy-jdk-configs" arch="src">
  <version epoch="0" ver="2.2" rel="5.el7_4"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-3" date="1452254400">- pretrasn lua call now done in pcall (protected call)
- also posttrans now always return 0</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-3" date="1460462400">- inital commit to rhel
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-3" date="1460462401">- commented requires on lua posix to stop blocking composes.
- changed it to 644 to dont mislead by executable flags
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-5" date="1468324800">- posttrans silenced, the error is appearing only in state, when there is nothing to copy
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2-1" date="1470744000">- updated to 1,3 which fixing nss minor issue
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3-1" date="1480593600">- updated to upstream 1.3 (adding jre/lib/security/cacerts file)
- Resolves: rhbz#1399719</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-1" date="1497355200">- added "jre/lib/security/blacklisted.certs" to cared files
- moved to newest release 2.1
- moved to new upstream at pagure.io
- added new script of copy_jdk_configs_fixFiles.sh 
- copy_jdk_configs.lua  aligned to it
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-3" date="1497873600">- updated to latest head
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-4" date="1510833600">- added an daplied in install patch1: newPolices.patch
- Resolves: rhbz#1513697</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-5" date="1511265600">- adapted (added policy subdir) patch1: newPolices.patch
- Resolves: rhbz#1513697</changelog>
</package>
<package pkgid="70b3faf75bd60c9897934131d91537a93b1d40564ee86c2489c6e4f304d20392" name="copy-jdk-configs" arch="noarch">
  <version epoch="0" ver="3.3" rel="10.el7_5"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-3" date="1460462400">- commented requires on lua posix to stop blocking composes.
- changed it to 644 to dont mislead by executable flags
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-5" date="1468324800">- posttrans silenced, the error is appearing only in state, when there is nothing to copy
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2-1" date="1470744000">- updated to 1,3 which fixing nss minor issue
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3-1" date="1480593600">- updated to upstream 1.3 (adding jre/lib/security/cacerts file)
- Resolves: rhbz#1399719</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-1" date="1497355200">- added "jre/lib/security/blacklisted.certs" to cared files
- moved to newest release 2.1
- moved to new upstream at pagure.io
- added new script of copy_jdk_configs_fixFiles.sh 
- copy_jdk_configs.lua  aligned to it
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-3" date="1497873600">- updated to latest head
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-1" date="1509710400">- updated to 3.3
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-2" date="1509710401">- added another subdirs for policies files
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-3" date="1524657600">- fixes issue when java.security for openjdk7 was erased
- Resolves: rhbz#1573163</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-10" date="1525089600">- added javaws.policy and blacklist
- Resolves: rhbz#1573163</changelog>
</package>
<package pkgid="a14d80ea53dc940fcd8ac2fe2e0e79b19c15b5242cdb302e4b90fe47ddc86651" name="copy-jdk-configs" arch="noarch">
  <version epoch="0" ver="3.3" rel="10.el7_5"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-3" date="1460462400">- commented requires on lua posix to stop blocking composes.
- changed it to 644 to dont mislead by executable flags
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-5" date="1468324800">- posttrans silenced, the error is appearing only in state, when there is nothing to copy
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2-1" date="1470744000">- updated to 1,3 which fixing nss minor issue
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3-1" date="1480593600">- updated to upstream 1.3 (adding jre/lib/security/cacerts file)
- Resolves: rhbz#1399719</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-1" date="1497355200">- added "jre/lib/security/blacklisted.certs" to cared files
- moved to newest release 2.1
- moved to new upstream at pagure.io
- added new script of copy_jdk_configs_fixFiles.sh 
- copy_jdk_configs.lua  aligned to it
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-3" date="1497873600">- updated to latest head
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-1" date="1509710400">- updated to 3.3
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-2" date="1509710401">- added another subdirs for policies files
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-3" date="1524657600">- fixes issue when java.security for openjdk7 was erased
- Resolves: rhbz#1573163</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-10" date="1525089600">- added javaws.policy and blacklist
- Resolves: rhbz#1573163</changelog>
</package>
<package pkgid="24fb0f512bb8a0b34d799bddda10fc33ce90b933e1031a8f59a3a0c138d1279c" name="copy-jdk-configs" arch="src">
  <version epoch="0" ver="3.3" rel="10.el7_5"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-3" date="1460462400">- commented requires on lua posix to stop blocking composes.
- changed it to 644 to dont mislead by executable flags
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-5" date="1468324800">- posttrans silenced, the error is appearing only in state, when there is nothing to copy
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2-1" date="1470744000">- updated to 1,3 which fixing nss minor issue
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3-1" date="1480593600">- updated to upstream 1.3 (adding jre/lib/security/cacerts file)
- Resolves: rhbz#1399719</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-1" date="1497355200">- added "jre/lib/security/blacklisted.certs" to cared files
- moved to newest release 2.1
- moved to new upstream at pagure.io
- added new script of copy_jdk_configs_fixFiles.sh 
- copy_jdk_configs.lua  aligned to it
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-3" date="1497873600">- updated to latest head
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-1" date="1509710400">- updated to 3.3
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-2" date="1509710401">- added another subdirs for policies files
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-3" date="1524657600">- fixes issue when java.security for openjdk7 was erased
- Resolves: rhbz#1573163</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-10" date="1525089600">- added javaws.policy and blacklist
- Resolves: rhbz#1573163</changelog>
</package>
<package pkgid="b0611c262a7f3c705e844a47f150306d8acff0ed84d1bd24c70c1edc24a51241" name="copy-jdk-configs" arch="src">
  <version epoch="0" ver="3.3" rel="10.el7_5"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-3" date="1460462400">- commented requires on lua posix to stop blocking composes.
- changed it to 644 to dont mislead by executable flags
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-5" date="1468324800">- posttrans silenced, the error is appearing only in state, when there is nothing to copy
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2-1" date="1470744000">- updated to 1,3 which fixing nss minor issue
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3-1" date="1480593600">- updated to upstream 1.3 (adding jre/lib/security/cacerts file)
- Resolves: rhbz#1399719</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-1" date="1497355200">- added "jre/lib/security/blacklisted.certs" to cared files
- moved to newest release 2.1
- moved to new upstream at pagure.io
- added new script of copy_jdk_configs_fixFiles.sh 
- copy_jdk_configs.lua  aligned to it
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-3" date="1497873600">- updated to latest head
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-1" date="1509710400">- updated to 3.3
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-2" date="1509710401">- added another subdirs for policies files
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-3" date="1524657600">- fixes issue when java.security for openjdk7 was erased
- Resolves: rhbz#1573163</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-10" date="1525089600">- added javaws.policy and blacklist
- Resolves: rhbz#1573163</changelog>
</package>
<package pkgid="179407ad2bde4243f0ec7a56dab8d9cad8a8ee05a66a740c9031394b58968fb6" name="corosync" arch="i686">
  <version epoch="0" ver="2.4.0" rel="9.el7_4.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-2" date="1470312000">- Resolves: rhbz#1363654

- Config: Flag config uidgid entries (rhbz#1363654)
- merge upstream commit f837f95dfe96d60f2367e900efd4def7a07b2a89 (rhbz#1363654)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-3" date="1470312001">- Related: rhbz#1363654

- Enhance spec so corosync-qdevice subpackage depends on same version of
  the corosync and corosynclib packages.</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.1" date="1501675200">- Resolves: rhbz#1477461

- main: Add option to set priority (rhbz#1477461)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1477461)
- main: Add support for libcgroup (rhbz#1477461)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1477461)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.2" date="1503576000">- Resolves: rhbz#1484264

- totem: Propagate totem initialization failure (rhbz#1484264)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1484264)
- totemcrypto: Refactor symmetric key importing (rhbz#1484264)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1484264)
- totemcrypto: Use different method to import key (rhbz#1484264)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1484264)
- totemcrypto: Fix compiler warning (rhbz#1484264)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1484264)</changelog>
</package>
<package pkgid="cfc270952db2eddaee434fef0453ec667563a120f9cc125b8b06bae7aa89e68f" name="corosync" arch="src">
  <version epoch="0" ver="2.4.0" rel="9.el7_4.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-2" date="1470312000">- Resolves: rhbz#1363654

- Config: Flag config uidgid entries (rhbz#1363654)
- merge upstream commit f837f95dfe96d60f2367e900efd4def7a07b2a89 (rhbz#1363654)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-3" date="1470312001">- Related: rhbz#1363654

- Enhance spec so corosync-qdevice subpackage depends on same version of
  the corosync and corosynclib packages.</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.1" date="1501675200">- Resolves: rhbz#1477461

- main: Add option to set priority (rhbz#1477461)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1477461)
- main: Add support for libcgroup (rhbz#1477461)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1477461)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.2" date="1503576000">- Resolves: rhbz#1484264

- totem: Propagate totem initialization failure (rhbz#1484264)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1484264)
- totemcrypto: Refactor symmetric key importing (rhbz#1484264)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1484264)
- totemcrypto: Use different method to import key (rhbz#1484264)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1484264)
- totemcrypto: Fix compiler warning (rhbz#1484264)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1484264)</changelog>
</package>
<package pkgid="403988a11401e60076a508601c42e702f04c7ae05fd9fc83d7db46803de93687" name="corosync" arch="src">
  <version epoch="0" ver="2.4.0" rel="9.el7_4.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-2" date="1470312000">- Resolves: rhbz#1363654

- Config: Flag config uidgid entries (rhbz#1363654)
- merge upstream commit f837f95dfe96d60f2367e900efd4def7a07b2a89 (rhbz#1363654)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-3" date="1470312001">- Related: rhbz#1363654

- Enhance spec so corosync-qdevice subpackage depends on same version of
  the corosync and corosynclib packages.</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.1" date="1501675200">- Resolves: rhbz#1477461

- main: Add option to set priority (rhbz#1477461)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1477461)
- main: Add support for libcgroup (rhbz#1477461)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1477461)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.2" date="1503576000">- Resolves: rhbz#1484264

- totem: Propagate totem initialization failure (rhbz#1484264)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1484264)
- totemcrypto: Refactor symmetric key importing (rhbz#1484264)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1484264)
- totemcrypto: Use different method to import key (rhbz#1484264)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1484264)
- totemcrypto: Fix compiler warning (rhbz#1484264)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1484264)</changelog>
</package>
<package pkgid="fdecd09af545d9513b5b457a0a94b1ee302b54966457b323040a65910730db42" name="corosync" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="9.el7_4.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-2" date="1470312000">- Resolves: rhbz#1363654

- Config: Flag config uidgid entries (rhbz#1363654)
- merge upstream commit f837f95dfe96d60f2367e900efd4def7a07b2a89 (rhbz#1363654)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-3" date="1470312001">- Related: rhbz#1363654

- Enhance spec so corosync-qdevice subpackage depends on same version of
  the corosync and corosynclib packages.</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.1" date="1501675200">- Resolves: rhbz#1477461

- main: Add option to set priority (rhbz#1477461)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1477461)
- main: Add support for libcgroup (rhbz#1477461)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1477461)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.2" date="1503576000">- Resolves: rhbz#1484264

- totem: Propagate totem initialization failure (rhbz#1484264)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1484264)
- totemcrypto: Refactor symmetric key importing (rhbz#1484264)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1484264)
- totemcrypto: Use different method to import key (rhbz#1484264)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1484264)
- totemcrypto: Fix compiler warning (rhbz#1484264)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1484264)</changelog>
</package>
<package pkgid="c934e0daf856638d60581f871a33792b741f6f7b67a20c459936882a9610ba61" name="corosync-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.0" rel="9.el7_4.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-2" date="1470312000">- Resolves: rhbz#1363654

- Config: Flag config uidgid entries (rhbz#1363654)
- merge upstream commit f837f95dfe96d60f2367e900efd4def7a07b2a89 (rhbz#1363654)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-3" date="1470312001">- Related: rhbz#1363654

- Enhance spec so corosync-qdevice subpackage depends on same version of
  the corosync and corosynclib packages.</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.1" date="1501675200">- Resolves: rhbz#1477461

- main: Add option to set priority (rhbz#1477461)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1477461)
- main: Add support for libcgroup (rhbz#1477461)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1477461)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.2" date="1503576000">- Resolves: rhbz#1484264

- totem: Propagate totem initialization failure (rhbz#1484264)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1484264)
- totemcrypto: Refactor symmetric key importing (rhbz#1484264)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1484264)
- totemcrypto: Use different method to import key (rhbz#1484264)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1484264)
- totemcrypto: Fix compiler warning (rhbz#1484264)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1484264)</changelog>
</package>
<package pkgid="2c66def610b873a698bd434becd0d9c06439f6c6458a4c41b9d5ba49bb303950" name="corosync-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="9.el7_4.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-2" date="1470312000">- Resolves: rhbz#1363654

- Config: Flag config uidgid entries (rhbz#1363654)
- merge upstream commit f837f95dfe96d60f2367e900efd4def7a07b2a89 (rhbz#1363654)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-3" date="1470312001">- Related: rhbz#1363654

- Enhance spec so corosync-qdevice subpackage depends on same version of
  the corosync and corosynclib packages.</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.1" date="1501675200">- Resolves: rhbz#1477461

- main: Add option to set priority (rhbz#1477461)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1477461)
- main: Add support for libcgroup (rhbz#1477461)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1477461)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.2" date="1503576000">- Resolves: rhbz#1484264

- totem: Propagate totem initialization failure (rhbz#1484264)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1484264)
- totemcrypto: Refactor symmetric key importing (rhbz#1484264)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1484264)
- totemcrypto: Use different method to import key (rhbz#1484264)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1484264)
- totemcrypto: Fix compiler warning (rhbz#1484264)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1484264)</changelog>
</package>
<package pkgid="0b8b03627272479d1ee32613ec457e8bb52552334ce77609cd45acde285ce416" name="corosync-qdevice" arch="i686">
  <version epoch="0" ver="2.4.0" rel="9.el7_4.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-2" date="1470312000">- Resolves: rhbz#1363654

- Config: Flag config uidgid entries (rhbz#1363654)
- merge upstream commit f837f95dfe96d60f2367e900efd4def7a07b2a89 (rhbz#1363654)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-3" date="1470312001">- Related: rhbz#1363654

- Enhance spec so corosync-qdevice subpackage depends on same version of
  the corosync and corosynclib packages.</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.1" date="1501675200">- Resolves: rhbz#1477461

- main: Add option to set priority (rhbz#1477461)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1477461)
- main: Add support for libcgroup (rhbz#1477461)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1477461)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.2" date="1503576000">- Resolves: rhbz#1484264

- totem: Propagate totem initialization failure (rhbz#1484264)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1484264)
- totemcrypto: Refactor symmetric key importing (rhbz#1484264)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1484264)
- totemcrypto: Use different method to import key (rhbz#1484264)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1484264)
- totemcrypto: Fix compiler warning (rhbz#1484264)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1484264)</changelog>
</package>
<package pkgid="2d3e558c80cddaf21d11b80502dc9876f7a0cfee620d015083d3085f1875ad88" name="corosync-qdevice" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="9.el7_4.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-2" date="1470312000">- Resolves: rhbz#1363654

- Config: Flag config uidgid entries (rhbz#1363654)
- merge upstream commit f837f95dfe96d60f2367e900efd4def7a07b2a89 (rhbz#1363654)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-3" date="1470312001">- Related: rhbz#1363654

- Enhance spec so corosync-qdevice subpackage depends on same version of
  the corosync and corosynclib packages.</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.1" date="1501675200">- Resolves: rhbz#1477461

- main: Add option to set priority (rhbz#1477461)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1477461)
- main: Add support for libcgroup (rhbz#1477461)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1477461)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.2" date="1503576000">- Resolves: rhbz#1484264

- totem: Propagate totem initialization failure (rhbz#1484264)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1484264)
- totemcrypto: Refactor symmetric key importing (rhbz#1484264)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1484264)
- totemcrypto: Use different method to import key (rhbz#1484264)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1484264)
- totemcrypto: Fix compiler warning (rhbz#1484264)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1484264)</changelog>
</package>
<package pkgid="7e5bb631ba7aa8d68f1cf78f7021568dca16b3ca7139eefce8f7399b1049a34d" name="corosync-qnetd" arch="i686">
  <version epoch="0" ver="2.4.0" rel="9.el7_4.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-2" date="1470312000">- Resolves: rhbz#1363654

- Config: Flag config uidgid entries (rhbz#1363654)
- merge upstream commit f837f95dfe96d60f2367e900efd4def7a07b2a89 (rhbz#1363654)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-3" date="1470312001">- Related: rhbz#1363654

- Enhance spec so corosync-qdevice subpackage depends on same version of
  the corosync and corosynclib packages.</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.1" date="1501675200">- Resolves: rhbz#1477461

- main: Add option to set priority (rhbz#1477461)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1477461)
- main: Add support for libcgroup (rhbz#1477461)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1477461)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.2" date="1503576000">- Resolves: rhbz#1484264

- totem: Propagate totem initialization failure (rhbz#1484264)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1484264)
- totemcrypto: Refactor symmetric key importing (rhbz#1484264)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1484264)
- totemcrypto: Use different method to import key (rhbz#1484264)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1484264)
- totemcrypto: Fix compiler warning (rhbz#1484264)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1484264)</changelog>
</package>
<package pkgid="a449d871f0f0c1d63d856ea7415b0e04b8fdc28900c9dfc1a69220612b243321" name="corosync-qnetd" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="9.el7_4.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-2" date="1470312000">- Resolves: rhbz#1363654

- Config: Flag config uidgid entries (rhbz#1363654)
- merge upstream commit f837f95dfe96d60f2367e900efd4def7a07b2a89 (rhbz#1363654)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-3" date="1470312001">- Related: rhbz#1363654

- Enhance spec so corosync-qdevice subpackage depends on same version of
  the corosync and corosynclib packages.</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.1" date="1501675200">- Resolves: rhbz#1477461

- main: Add option to set priority (rhbz#1477461)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1477461)
- main: Add support for libcgroup (rhbz#1477461)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1477461)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.2" date="1503576000">- Resolves: rhbz#1484264

- totem: Propagate totem initialization failure (rhbz#1484264)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1484264)
- totemcrypto: Refactor symmetric key importing (rhbz#1484264)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1484264)
- totemcrypto: Use different method to import key (rhbz#1484264)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1484264)
- totemcrypto: Fix compiler warning (rhbz#1484264)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1484264)</changelog>
</package>
<package pkgid="143803cf5c128e0a1b1dec2cf4703a818f6f96adaa0a8d9e0a9ba1749c9c26f1" name="corosynclib" arch="i686">
  <version epoch="0" ver="2.4.0" rel="9.el7_4.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-2" date="1470312000">- Resolves: rhbz#1363654

- Config: Flag config uidgid entries (rhbz#1363654)
- merge upstream commit f837f95dfe96d60f2367e900efd4def7a07b2a89 (rhbz#1363654)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-3" date="1470312001">- Related: rhbz#1363654

- Enhance spec so corosync-qdevice subpackage depends on same version of
  the corosync and corosynclib packages.</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.1" date="1501675200">- Resolves: rhbz#1477461

- main: Add option to set priority (rhbz#1477461)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1477461)
- main: Add support for libcgroup (rhbz#1477461)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1477461)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.2" date="1503576000">- Resolves: rhbz#1484264

- totem: Propagate totem initialization failure (rhbz#1484264)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1484264)
- totemcrypto: Refactor symmetric key importing (rhbz#1484264)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1484264)
- totemcrypto: Use different method to import key (rhbz#1484264)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1484264)
- totemcrypto: Fix compiler warning (rhbz#1484264)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1484264)</changelog>
</package>
<package pkgid="679a96403e8f7a2bcf6ff83e81e347ed1e15e704fbe79d7ba443c26d40783cec" name="corosynclib" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="9.el7_4.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-2" date="1470312000">- Resolves: rhbz#1363654

- Config: Flag config uidgid entries (rhbz#1363654)
- merge upstream commit f837f95dfe96d60f2367e900efd4def7a07b2a89 (rhbz#1363654)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-3" date="1470312001">- Related: rhbz#1363654

- Enhance spec so corosync-qdevice subpackage depends on same version of
  the corosync and corosynclib packages.</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.1" date="1501675200">- Resolves: rhbz#1477461

- main: Add option to set priority (rhbz#1477461)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1477461)
- main: Add support for libcgroup (rhbz#1477461)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1477461)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.2" date="1503576000">- Resolves: rhbz#1484264

- totem: Propagate totem initialization failure (rhbz#1484264)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1484264)
- totemcrypto: Refactor symmetric key importing (rhbz#1484264)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1484264)
- totemcrypto: Use different method to import key (rhbz#1484264)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1484264)
- totemcrypto: Fix compiler warning (rhbz#1484264)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1484264)</changelog>
</package>
<package pkgid="8557134a0945798a743590d14808cf8c46f7209235593b92d305deb83f08a1c6" name="corosynclib-devel" arch="i686">
  <version epoch="0" ver="2.4.0" rel="9.el7_4.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-2" date="1470312000">- Resolves: rhbz#1363654

- Config: Flag config uidgid entries (rhbz#1363654)
- merge upstream commit f837f95dfe96d60f2367e900efd4def7a07b2a89 (rhbz#1363654)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-3" date="1470312001">- Related: rhbz#1363654

- Enhance spec so corosync-qdevice subpackage depends on same version of
  the corosync and corosynclib packages.</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.1" date="1501675200">- Resolves: rhbz#1477461

- main: Add option to set priority (rhbz#1477461)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1477461)
- main: Add support for libcgroup (rhbz#1477461)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1477461)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.2" date="1503576000">- Resolves: rhbz#1484264

- totem: Propagate totem initialization failure (rhbz#1484264)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1484264)
- totemcrypto: Refactor symmetric key importing (rhbz#1484264)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1484264)
- totemcrypto: Use different method to import key (rhbz#1484264)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1484264)
- totemcrypto: Fix compiler warning (rhbz#1484264)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1484264)</changelog>
</package>
<package pkgid="bc3c83f0bbf110e1fc9366d28339ae320adc05c770eba03a9181cab0af915127" name="corosynclib-devel" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="9.el7_4.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-2" date="1470312000">- Resolves: rhbz#1363654

- Config: Flag config uidgid entries (rhbz#1363654)
- merge upstream commit f837f95dfe96d60f2367e900efd4def7a07b2a89 (rhbz#1363654)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-3" date="1470312001">- Related: rhbz#1363654

- Enhance spec so corosync-qdevice subpackage depends on same version of
  the corosync and corosynclib packages.</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.1" date="1501675200">- Resolves: rhbz#1477461

- main: Add option to set priority (rhbz#1477461)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1477461)
- main: Add support for libcgroup (rhbz#1477461)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1477461)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.2" date="1503576000">- Resolves: rhbz#1484264

- totem: Propagate totem initialization failure (rhbz#1484264)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1484264)
- totemcrypto: Refactor symmetric key importing (rhbz#1484264)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1484264)
- totemcrypto: Use different method to import key (rhbz#1484264)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1484264)
- totemcrypto: Fix compiler warning (rhbz#1484264)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1484264)</changelog>
</package>
<package pkgid="b9aebc1d2a90ff6b7ffb14483cb6bb77ff01171f139b974d2da556da03573be3" name="cpio" arch="i686">
  <version epoch="0" ver="2.11" rel="25.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.11-16" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-17" date="1363003200">- fix small memory leak in copyin.c (#919454)
- remove %defattr and install 'cpio' to real %{_bindir}
- CovScan: add %{?_rawbuild}</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-18" date="1363089600">- explicitly provide /bin/cpio for packages that are dependant on this file</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-19" date="1363348800">- revert the fix for memory leak (at least for now) #921725</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-20" date="1364385600">- fix another bogus date in changelog
- update config.guess/config.sub for aarm64 build (#925189)
- run autoreconf instead of autoheader</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.11-21" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.11-22" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-23" date="1432123200">- better check for read() error (rhbz#1138148)
- fix ru translation (rhbz#1075513)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-24" date="1436356800">- fix for CVE-2014-9112</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-25" date="1486382400">- fix crc checksum for files ~200M+ (rhbz#1415081)</changelog>
</package>
<package pkgid="bc29d09efd7502924ec5ad54b08aa68bd28f8852c392a66271d2a7943ee099f7" name="cpio" arch="src">
  <version epoch="0" ver="2.11" rel="25.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.11-16" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-17" date="1363003200">- fix small memory leak in copyin.c (#919454)
- remove %defattr and install 'cpio' to real %{_bindir}
- CovScan: add %{?_rawbuild}</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-18" date="1363089600">- explicitly provide /bin/cpio for packages that are dependant on this file</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-19" date="1363348800">- revert the fix for memory leak (at least for now) #921725</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-20" date="1364385600">- fix another bogus date in changelog
- update config.guess/config.sub for aarm64 build (#925189)
- run autoreconf instead of autoheader</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.11-21" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.11-22" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-23" date="1432123200">- better check for read() error (rhbz#1138148)
- fix ru translation (rhbz#1075513)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-24" date="1436356800">- fix for CVE-2014-9112</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-25" date="1486382400">- fix crc checksum for files ~200M+ (rhbz#1415081)</changelog>
</package>
<package pkgid="00e4911e04b17c541586594b8fd675ee60bf2d6dfac6afc6ffc4ad3a77008950" name="cpio" arch="src">
  <version epoch="0" ver="2.11" rel="25.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.11-16" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-17" date="1363003200">- fix small memory leak in copyin.c (#919454)
- remove %defattr and install 'cpio' to real %{_bindir}
- CovScan: add %{?_rawbuild}</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-18" date="1363089600">- explicitly provide /bin/cpio for packages that are dependant on this file</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-19" date="1363348800">- revert the fix for memory leak (at least for now) #921725</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-20" date="1364385600">- fix another bogus date in changelog
- update config.guess/config.sub for aarm64 build (#925189)
- run autoreconf instead of autoheader</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.11-21" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.11-22" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-23" date="1432123200">- better check for read() error (rhbz#1138148)
- fix ru translation (rhbz#1075513)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-24" date="1436356800">- fix for CVE-2014-9112</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-25" date="1486382400">- fix crc checksum for files ~200M+ (rhbz#1415081)</changelog>
</package>
<package pkgid="12f40cbab608164c1ba067139831f018a48000c6c906cba92a0dbc86fb58080e" name="cpio" arch="x86_64">
  <version epoch="0" ver="2.11" rel="25.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.11-16" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-17" date="1363003200">- fix small memory leak in copyin.c (#919454)
- remove %defattr and install 'cpio' to real %{_bindir}
- CovScan: add %{?_rawbuild}</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-18" date="1363089600">- explicitly provide /bin/cpio for packages that are dependant on this file</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-19" date="1363348800">- revert the fix for memory leak (at least for now) #921725</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-20" date="1364385600">- fix another bogus date in changelog
- update config.guess/config.sub for aarm64 build (#925189)
- run autoreconf instead of autoheader</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.11-21" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.11-22" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-23" date="1432123200">- better check for read() error (rhbz#1138148)
- fix ru translation (rhbz#1075513)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-24" date="1436356800">- fix for CVE-2014-9112</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-25" date="1486382400">- fix crc checksum for files ~200M+ (rhbz#1415081)</changelog>
</package>
<package pkgid="92d0ddf387159b86863a787ea035e2ecd3fd69dbe61582e5e3439c2290127e67" name="cpio-debuginfo" arch="i686">
  <version epoch="0" ver="2.11" rel="25.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.11-16" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-17" date="1363003200">- fix small memory leak in copyin.c (#919454)
- remove %defattr and install 'cpio' to real %{_bindir}
- CovScan: add %{?_rawbuild}</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-18" date="1363089600">- explicitly provide /bin/cpio for packages that are dependant on this file</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-19" date="1363348800">- revert the fix for memory leak (at least for now) #921725</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-20" date="1364385600">- fix another bogus date in changelog
- update config.guess/config.sub for aarm64 build (#925189)
- run autoreconf instead of autoheader</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.11-21" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.11-22" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-23" date="1432123200">- better check for read() error (rhbz#1138148)
- fix ru translation (rhbz#1075513)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-24" date="1436356800">- fix for CVE-2014-9112</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-25" date="1486382400">- fix crc checksum for files ~200M+ (rhbz#1415081)</changelog>
</package>
<package pkgid="678185cabfc567645a5f72dd91206265b1eae3a605f51cd9fde3bd6b3477fc95" name="cpio-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.11" rel="25.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.11-16" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-17" date="1363003200">- fix small memory leak in copyin.c (#919454)
- remove %defattr and install 'cpio' to real %{_bindir}
- CovScan: add %{?_rawbuild}</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-18" date="1363089600">- explicitly provide /bin/cpio for packages that are dependant on this file</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-19" date="1363348800">- revert the fix for memory leak (at least for now) #921725</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-20" date="1364385600">- fix another bogus date in changelog
- update config.guess/config.sub for aarm64 build (#925189)
- run autoreconf instead of autoheader</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.11-21" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.11-22" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-23" date="1432123200">- better check for read() error (rhbz#1138148)
- fix ru translation (rhbz#1075513)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-24" date="1436356800">- fix for CVE-2014-9112</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-25" date="1486382400">- fix crc checksum for files ~200M+ (rhbz#1415081)</changelog>
</package>
<package pkgid="bd343e40e096470c3e9474498b0c8ba66923969cb76d185c661f21c3d1642ba2" name="cpp" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="86a56cfd8a643ff737bb368d09bc8736611ef9677f07ab8bdd31abab16d4ae74" name="cpp" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="23c4126878ef04440763d5f68f5f5860b6775bcc7c936eca83ead6f72d359025" name="cpp" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="f12ab5d428aba5ac804ea4f650b08bde03998b91a27a291944580424a141168f" name="cpp" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="e9d59417d6fd4f8eda7f5e3cc1e375570a15a7d160324c682d91ca531832071b" name="cryptsetup" arch="i686">
  <version epoch="0" ver="1.7.4" rel="3.el7_4.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.3-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-1" date="1410177600">- Update to cryptsetup 1.6.6.
- Resolves: #1117372 #1038097</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-2" date="1411992000">- patch: fix failures related to reencrypt log files
- Resolves: #1140199</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-3" date="1418904000">- drop FIPS power on self test and library checksum
- Resolves: #1158897</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.7-1" date="1434628800">- Update to cryptsetup 1.6.7.
- patch: avoid use of kernel crypto API socket which is known
  to be broken in RHEL7.0 kernel (7.1+ is fine).
- Resolves: #1206170</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.2-1" date="1465300800">- Update to cryptsetup 1.7.2.
- Resolves: #1302022 #1070825</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-1" date="1489579200">- Update to cryptsetup 1.7.4.
- Resolves: #1381273</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-2" date="1491307200">- patch: fix access to unaligned hidden TrueCrypt header.
- Resolves: #1435543</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3" date="1493121600">- patch: fix luksFormat failure while running in FIPS mode.
- Resolves: #1444137</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3.el7_4.1" date="1510833600">- patch: fix regression in blockwise functions (archs with 64 KiB
  page_size)
- Resolves: #1510841</changelog>
</package>
<package pkgid="5452f3bcd7ea6e9aa5a6b0e3548b3f4f85fc4a8c1d494688a1d16bb7eda7b788" name="cryptsetup" arch="src">
  <version epoch="0" ver="1.7.4" rel="3.el7_4.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.3-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-1" date="1410177600">- Update to cryptsetup 1.6.6.
- Resolves: #1117372 #1038097</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-2" date="1411992000">- patch: fix failures related to reencrypt log files
- Resolves: #1140199</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-3" date="1418904000">- drop FIPS power on self test and library checksum
- Resolves: #1158897</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.7-1" date="1434628800">- Update to cryptsetup 1.6.7.
- patch: avoid use of kernel crypto API socket which is known
  to be broken in RHEL7.0 kernel (7.1+ is fine).
- Resolves: #1206170</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.2-1" date="1465300800">- Update to cryptsetup 1.7.2.
- Resolves: #1302022 #1070825</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-1" date="1489579200">- Update to cryptsetup 1.7.4.
- Resolves: #1381273</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-2" date="1491307200">- patch: fix access to unaligned hidden TrueCrypt header.
- Resolves: #1435543</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3" date="1493121600">- patch: fix luksFormat failure while running in FIPS mode.
- Resolves: #1444137</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3.el7_4.1" date="1510833600">- patch: fix regression in blockwise functions (archs with 64 KiB
  page_size)
- Resolves: #1510841</changelog>
</package>
<package pkgid="011cbd4f519c4ffa2b1e8861c5ea6486630abd866285d2d1f3073a3bf0e8646d" name="cryptsetup" arch="src">
  <version epoch="0" ver="1.7.4" rel="3.el7_4.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.3-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-1" date="1410177600">- Update to cryptsetup 1.6.6.
- Resolves: #1117372 #1038097</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-2" date="1411992000">- patch: fix failures related to reencrypt log files
- Resolves: #1140199</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-3" date="1418904000">- drop FIPS power on self test and library checksum
- Resolves: #1158897</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.7-1" date="1434628800">- Update to cryptsetup 1.6.7.
- patch: avoid use of kernel crypto API socket which is known
  to be broken in RHEL7.0 kernel (7.1+ is fine).
- Resolves: #1206170</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.2-1" date="1465300800">- Update to cryptsetup 1.7.2.
- Resolves: #1302022 #1070825</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-1" date="1489579200">- Update to cryptsetup 1.7.4.
- Resolves: #1381273</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-2" date="1491307200">- patch: fix access to unaligned hidden TrueCrypt header.
- Resolves: #1435543</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3" date="1493121600">- patch: fix luksFormat failure while running in FIPS mode.
- Resolves: #1444137</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3.el7_4.1" date="1510833600">- patch: fix regression in blockwise functions (archs with 64 KiB
  page_size)
- Resolves: #1510841</changelog>
</package>
<package pkgid="b57ec4bf55883df5b841d4e5a01c9158a39d1a05f8f54a89ef14575d6b458e6e" name="cryptsetup" arch="x86_64">
  <version epoch="0" ver="1.7.4" rel="3.el7_4.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.3-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-1" date="1410177600">- Update to cryptsetup 1.6.6.
- Resolves: #1117372 #1038097</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-2" date="1411992000">- patch: fix failures related to reencrypt log files
- Resolves: #1140199</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-3" date="1418904000">- drop FIPS power on self test and library checksum
- Resolves: #1158897</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.7-1" date="1434628800">- Update to cryptsetup 1.6.7.
- patch: avoid use of kernel crypto API socket which is known
  to be broken in RHEL7.0 kernel (7.1+ is fine).
- Resolves: #1206170</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.2-1" date="1465300800">- Update to cryptsetup 1.7.2.
- Resolves: #1302022 #1070825</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-1" date="1489579200">- Update to cryptsetup 1.7.4.
- Resolves: #1381273</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-2" date="1491307200">- patch: fix access to unaligned hidden TrueCrypt header.
- Resolves: #1435543</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3" date="1493121600">- patch: fix luksFormat failure while running in FIPS mode.
- Resolves: #1444137</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3.el7_4.1" date="1510833600">- patch: fix regression in blockwise functions (archs with 64 KiB
  page_size)
- Resolves: #1510841</changelog>
</package>
<package pkgid="bef6d60812437b0e9db551a24dd07f117a7cf8d58c0fccf1fa00cf3355b055f4" name="cryptsetup-debuginfo" arch="i686">
  <version epoch="0" ver="1.7.4" rel="3.el7_4.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.3-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-1" date="1410177600">- Update to cryptsetup 1.6.6.
- Resolves: #1117372 #1038097</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-2" date="1411992000">- patch: fix failures related to reencrypt log files
- Resolves: #1140199</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-3" date="1418904000">- drop FIPS power on self test and library checksum
- Resolves: #1158897</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.7-1" date="1434628800">- Update to cryptsetup 1.6.7.
- patch: avoid use of kernel crypto API socket which is known
  to be broken in RHEL7.0 kernel (7.1+ is fine).
- Resolves: #1206170</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.2-1" date="1465300800">- Update to cryptsetup 1.7.2.
- Resolves: #1302022 #1070825</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-1" date="1489579200">- Update to cryptsetup 1.7.4.
- Resolves: #1381273</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-2" date="1491307200">- patch: fix access to unaligned hidden TrueCrypt header.
- Resolves: #1435543</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3" date="1493121600">- patch: fix luksFormat failure while running in FIPS mode.
- Resolves: #1444137</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3.el7_4.1" date="1510833600">- patch: fix regression in blockwise functions (archs with 64 KiB
  page_size)
- Resolves: #1510841</changelog>
</package>
<package pkgid="d7ddd824c1617efa5d6299967f7e87e22492bbd087bf7a77b8841b592eb76d89" name="cryptsetup-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7.4" rel="3.el7_4.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.3-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-1" date="1410177600">- Update to cryptsetup 1.6.6.
- Resolves: #1117372 #1038097</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-2" date="1411992000">- patch: fix failures related to reencrypt log files
- Resolves: #1140199</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-3" date="1418904000">- drop FIPS power on self test and library checksum
- Resolves: #1158897</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.7-1" date="1434628800">- Update to cryptsetup 1.6.7.
- patch: avoid use of kernel crypto API socket which is known
  to be broken in RHEL7.0 kernel (7.1+ is fine).
- Resolves: #1206170</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.2-1" date="1465300800">- Update to cryptsetup 1.7.2.
- Resolves: #1302022 #1070825</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-1" date="1489579200">- Update to cryptsetup 1.7.4.
- Resolves: #1381273</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-2" date="1491307200">- patch: fix access to unaligned hidden TrueCrypt header.
- Resolves: #1435543</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3" date="1493121600">- patch: fix luksFormat failure while running in FIPS mode.
- Resolves: #1444137</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3.el7_4.1" date="1510833600">- patch: fix regression in blockwise functions (archs with 64 KiB
  page_size)
- Resolves: #1510841</changelog>
</package>
<package pkgid="4616b6c8a3ae3c9ac6cb8b1b8371aca2ac27c6cb2748571eb707bb167fcef534" name="cryptsetup-devel" arch="i686">
  <version epoch="0" ver="1.7.4" rel="3.el7_4.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.3-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-1" date="1410177600">- Update to cryptsetup 1.6.6.
- Resolves: #1117372 #1038097</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-2" date="1411992000">- patch: fix failures related to reencrypt log files
- Resolves: #1140199</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-3" date="1418904000">- drop FIPS power on self test and library checksum
- Resolves: #1158897</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.7-1" date="1434628800">- Update to cryptsetup 1.6.7.
- patch: avoid use of kernel crypto API socket which is known
  to be broken in RHEL7.0 kernel (7.1+ is fine).
- Resolves: #1206170</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.2-1" date="1465300800">- Update to cryptsetup 1.7.2.
- Resolves: #1302022 #1070825</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-1" date="1489579200">- Update to cryptsetup 1.7.4.
- Resolves: #1381273</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-2" date="1491307200">- patch: fix access to unaligned hidden TrueCrypt header.
- Resolves: #1435543</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3" date="1493121600">- patch: fix luksFormat failure while running in FIPS mode.
- Resolves: #1444137</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3.el7_4.1" date="1510833600">- patch: fix regression in blockwise functions (archs with 64 KiB
  page_size)
- Resolves: #1510841</changelog>
</package>
<package pkgid="03ba900b77eb2147bf29a6c029bfcf5847cb8b7083b5833414fd3040fe02f482" name="cryptsetup-devel" arch="x86_64">
  <version epoch="0" ver="1.7.4" rel="3.el7_4.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.3-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-1" date="1410177600">- Update to cryptsetup 1.6.6.
- Resolves: #1117372 #1038097</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-2" date="1411992000">- patch: fix failures related to reencrypt log files
- Resolves: #1140199</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-3" date="1418904000">- drop FIPS power on self test and library checksum
- Resolves: #1158897</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.7-1" date="1434628800">- Update to cryptsetup 1.6.7.
- patch: avoid use of kernel crypto API socket which is known
  to be broken in RHEL7.0 kernel (7.1+ is fine).
- Resolves: #1206170</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.2-1" date="1465300800">- Update to cryptsetup 1.7.2.
- Resolves: #1302022 #1070825</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-1" date="1489579200">- Update to cryptsetup 1.7.4.
- Resolves: #1381273</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-2" date="1491307200">- patch: fix access to unaligned hidden TrueCrypt header.
- Resolves: #1435543</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3" date="1493121600">- patch: fix luksFormat failure while running in FIPS mode.
- Resolves: #1444137</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3.el7_4.1" date="1510833600">- patch: fix regression in blockwise functions (archs with 64 KiB
  page_size)
- Resolves: #1510841</changelog>
</package>
<package pkgid="631c66a7c7829aea6fcf3e369b62e83dd2cf5c0db22c20ef61b02edd0876a551" name="cryptsetup-libs" arch="i686">
  <version epoch="0" ver="1.7.4" rel="3.el7_4.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.3-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-1" date="1410177600">- Update to cryptsetup 1.6.6.
- Resolves: #1117372 #1038097</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-2" date="1411992000">- patch: fix failures related to reencrypt log files
- Resolves: #1140199</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-3" date="1418904000">- drop FIPS power on self test and library checksum
- Resolves: #1158897</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.7-1" date="1434628800">- Update to cryptsetup 1.6.7.
- patch: avoid use of kernel crypto API socket which is known
  to be broken in RHEL7.0 kernel (7.1+ is fine).
- Resolves: #1206170</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.2-1" date="1465300800">- Update to cryptsetup 1.7.2.
- Resolves: #1302022 #1070825</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-1" date="1489579200">- Update to cryptsetup 1.7.4.
- Resolves: #1381273</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-2" date="1491307200">- patch: fix access to unaligned hidden TrueCrypt header.
- Resolves: #1435543</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3" date="1493121600">- patch: fix luksFormat failure while running in FIPS mode.
- Resolves: #1444137</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3.el7_4.1" date="1510833600">- patch: fix regression in blockwise functions (archs with 64 KiB
  page_size)
- Resolves: #1510841</changelog>
</package>
<package pkgid="9c66bd3d7dcbcba0d1e180d7ee61d59e9b69964e4525eea29b756d7b7e7483d9" name="cryptsetup-libs" arch="x86_64">
  <version epoch="0" ver="1.7.4" rel="3.el7_4.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.3-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-1" date="1410177600">- Update to cryptsetup 1.6.6.
- Resolves: #1117372 #1038097</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-2" date="1411992000">- patch: fix failures related to reencrypt log files
- Resolves: #1140199</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-3" date="1418904000">- drop FIPS power on self test and library checksum
- Resolves: #1158897</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.7-1" date="1434628800">- Update to cryptsetup 1.6.7.
- patch: avoid use of kernel crypto API socket which is known
  to be broken in RHEL7.0 kernel (7.1+ is fine).
- Resolves: #1206170</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.2-1" date="1465300800">- Update to cryptsetup 1.7.2.
- Resolves: #1302022 #1070825</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-1" date="1489579200">- Update to cryptsetup 1.7.4.
- Resolves: #1381273</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-2" date="1491307200">- patch: fix access to unaligned hidden TrueCrypt header.
- Resolves: #1435543</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3" date="1493121600">- patch: fix luksFormat failure while running in FIPS mode.
- Resolves: #1444137</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3.el7_4.1" date="1510833600">- patch: fix regression in blockwise functions (archs with 64 KiB
  page_size)
- Resolves: #1510841</changelog>
</package>
<package pkgid="7549873eaf7e928230bf2b126f599de2bcc80a8f50f28c960838bc60c9dc80e0" name="cryptsetup-python" arch="i686">
  <version epoch="0" ver="1.7.4" rel="3.el7_4.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.3-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-1" date="1410177600">- Update to cryptsetup 1.6.6.
- Resolves: #1117372 #1038097</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-2" date="1411992000">- patch: fix failures related to reencrypt log files
- Resolves: #1140199</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-3" date="1418904000">- drop FIPS power on self test and library checksum
- Resolves: #1158897</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.7-1" date="1434628800">- Update to cryptsetup 1.6.7.
- patch: avoid use of kernel crypto API socket which is known
  to be broken in RHEL7.0 kernel (7.1+ is fine).
- Resolves: #1206170</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.2-1" date="1465300800">- Update to cryptsetup 1.7.2.
- Resolves: #1302022 #1070825</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-1" date="1489579200">- Update to cryptsetup 1.7.4.
- Resolves: #1381273</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-2" date="1491307200">- patch: fix access to unaligned hidden TrueCrypt header.
- Resolves: #1435543</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3" date="1493121600">- patch: fix luksFormat failure while running in FIPS mode.
- Resolves: #1444137</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3.el7_4.1" date="1510833600">- patch: fix regression in blockwise functions (archs with 64 KiB
  page_size)
- Resolves: #1510841</changelog>
</package>
<package pkgid="303513fac6d939d08178af9b434cbcecc64ead96d4ac4f5085cc910eac35c293" name="cryptsetup-python" arch="x86_64">
  <version epoch="0" ver="1.7.4" rel="3.el7_4.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.3-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-1" date="1410177600">- Update to cryptsetup 1.6.6.
- Resolves: #1117372 #1038097</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-2" date="1411992000">- patch: fix failures related to reencrypt log files
- Resolves: #1140199</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-3" date="1418904000">- drop FIPS power on self test and library checksum
- Resolves: #1158897</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.7-1" date="1434628800">- Update to cryptsetup 1.6.7.
- patch: avoid use of kernel crypto API socket which is known
  to be broken in RHEL7.0 kernel (7.1+ is fine).
- Resolves: #1206170</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.2-1" date="1465300800">- Update to cryptsetup 1.7.2.
- Resolves: #1302022 #1070825</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-1" date="1489579200">- Update to cryptsetup 1.7.4.
- Resolves: #1381273</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-2" date="1491307200">- patch: fix access to unaligned hidden TrueCrypt header.
- Resolves: #1435543</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3" date="1493121600">- patch: fix luksFormat failure while running in FIPS mode.
- Resolves: #1444137</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3.el7_4.1" date="1510833600">- patch: fix regression in blockwise functions (archs with 64 KiB
  page_size)
- Resolves: #1510841</changelog>
</package>
<package pkgid="575e1fe8cbc434660418d002232416898ab9a4a713209ca5e3fb98c8bb19d810" name="cryptsetup-reencrypt" arch="i686">
  <version epoch="0" ver="1.7.4" rel="3.el7_4.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.3-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-1" date="1410177600">- Update to cryptsetup 1.6.6.
- Resolves: #1117372 #1038097</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-2" date="1411992000">- patch: fix failures related to reencrypt log files
- Resolves: #1140199</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-3" date="1418904000">- drop FIPS power on self test and library checksum
- Resolves: #1158897</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.7-1" date="1434628800">- Update to cryptsetup 1.6.7.
- patch: avoid use of kernel crypto API socket which is known
  to be broken in RHEL7.0 kernel (7.1+ is fine).
- Resolves: #1206170</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.2-1" date="1465300800">- Update to cryptsetup 1.7.2.
- Resolves: #1302022 #1070825</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-1" date="1489579200">- Update to cryptsetup 1.7.4.
- Resolves: #1381273</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-2" date="1491307200">- patch: fix access to unaligned hidden TrueCrypt header.
- Resolves: #1435543</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3" date="1493121600">- patch: fix luksFormat failure while running in FIPS mode.
- Resolves: #1444137</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3.el7_4.1" date="1510833600">- patch: fix regression in blockwise functions (archs with 64 KiB
  page_size)
- Resolves: #1510841</changelog>
</package>
<package pkgid="1b1c574f4aa9d8bbbc0f770b0608afc917426828478a2e0d4cff3a6559b31070" name="cryptsetup-reencrypt" arch="x86_64">
  <version epoch="0" ver="1.7.4" rel="3.el7_4.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.3-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-1" date="1410177600">- Update to cryptsetup 1.6.6.
- Resolves: #1117372 #1038097</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-2" date="1411992000">- patch: fix failures related to reencrypt log files
- Resolves: #1140199</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-3" date="1418904000">- drop FIPS power on self test and library checksum
- Resolves: #1158897</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.7-1" date="1434628800">- Update to cryptsetup 1.6.7.
- patch: avoid use of kernel crypto API socket which is known
  to be broken in RHEL7.0 kernel (7.1+ is fine).
- Resolves: #1206170</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.2-1" date="1465300800">- Update to cryptsetup 1.7.2.
- Resolves: #1302022 #1070825</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-1" date="1489579200">- Update to cryptsetup 1.7.4.
- Resolves: #1381273</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-2" date="1491307200">- patch: fix access to unaligned hidden TrueCrypt header.
- Resolves: #1435543</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3" date="1493121600">- patch: fix luksFormat failure while running in FIPS mode.
- Resolves: #1444137</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3.el7_4.1" date="1510833600">- patch: fix regression in blockwise functions (archs with 64 KiB
  page_size)
- Resolves: #1510841</changelog>
</package>
<package pkgid="e5434ba26af35e7a0ad36fc0ff8422822f4805dd5d61969c95328da497af6846" name="ctdb" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="d9947f6ee767bba0fd634886cbca3988b411703dfe652761d90c9ed198ae479a" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="9700604f5603521e455635f06853eae18c50379d89ccae90568d4dc57400d5ba" name="ctdb" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="7b663cf60e57fcbd4079d45ffebb5e0878f543fad107c41f94c627a80220b050" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="fd306bca0a4a3318964728f974ba6ff5c221bfc0733a25ebb683099158285ce9" name="ctdb" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="524747fe9a2f7bc88ea1e920f73afd7491edc423b08b00a71551d25dc7757879" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="63390a61b0c3bb1af16592d4be8eee07bd5dc79f1078925a54d1681aeda58eb7" name="ctdb-tests" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="77c6f4b9c4ef5ffa3b647edbcb349fc7ddf8cce1afc7baa70fcb6afc1993c98d" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="7483061dd5fab24ff3621c6d8eec67644d15f73091397fdd0a6e2168940b353c" name="ctdb-tests" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="74ffda3105269786cb6a3488b42cbe8f31a1ccecdd2460dc9a9e995abf71ea3b" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="88bd0c23483c1a58715932c65526856103f188b28b1a0d9ebc36ece2ab04c78f" name="ctdb-tests" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="640d522494cb255ed5c12a31a35b8970a39a7cf39f28990efed9836ab152dadc" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="774c67f0d6f15b56ba95efadf2bfb4079dc1b5157c91834f45d059e0a7fddae3" name="curl" arch="i686">
  <version epoch="0" ver="7.29.0" rel="42.el7_4.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-34" date="1471435200">- acknowledge the --no-sessionid/CURLOPT_SSL_SESSIONID_CACHE option
  (required by the fix for CVE-2016-5419)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-35" date="1472212800">- fix incorrect use of a previously loaded certificate from file
  (related to CVE-2016-5420)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-36" date="1474372800">- reject negative string lengths in curl_easy_[un]escape() (CVE-2016-7167)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-37" date="1475755200">- fix tight loop in non-blocking TLS handhsake over proxy (#1388162)
- handle cookies with numerical IPv6 address (#1341503)
- make libcurl recognize chacha20-poly1305 and SHA384 cipher-suites (#1374740)
- curl -E: allow to escape ':' in cert nickname (#1376062)
- run automake in %prep to avoid patching Makefile.in files from now on</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-38" date="1486641600">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-39" date="1488369600">- work around race condition in PK11_FindSlotByName() in NSS (#1404815)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-40" date="1490616000">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-41" date="1490788800">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-42" date="1490788801">- fix use of uninitialized variable detected by Covscan</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-42.el7_4.1" date="1508760000">- fix buffer overflow while processing IMAP FETCH response (CVE-2017-1000257)</changelog>
</package>
<package pkgid="d745efd9ac8b085dff40ce51ab2b70194791c3d98780ffad52e5482e9a677f47" name="curl" arch="src">
  <version epoch="0" ver="7.29.0" rel="42.el7_4.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-34" date="1471435200">- acknowledge the --no-sessionid/CURLOPT_SSL_SESSIONID_CACHE option
  (required by the fix for CVE-2016-5419)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-35" date="1472212800">- fix incorrect use of a previously loaded certificate from file
  (related to CVE-2016-5420)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-36" date="1474372800">- reject negative string lengths in curl_easy_[un]escape() (CVE-2016-7167)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-37" date="1475755200">- fix tight loop in non-blocking TLS handhsake over proxy (#1388162)
- handle cookies with numerical IPv6 address (#1341503)
- make libcurl recognize chacha20-poly1305 and SHA384 cipher-suites (#1374740)
- curl -E: allow to escape ':' in cert nickname (#1376062)
- run automake in %prep to avoid patching Makefile.in files from now on</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-38" date="1486641600">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-39" date="1488369600">- work around race condition in PK11_FindSlotByName() in NSS (#1404815)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-40" date="1490616000">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-41" date="1490788800">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-42" date="1490788801">- fix use of uninitialized variable detected by Covscan</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-42.el7_4.1" date="1508760000">- fix buffer overflow while processing IMAP FETCH response (CVE-2017-1000257)</changelog>
</package>
<package pkgid="162d629901518787f4882dd110360053f0db668496291c1af79716cd8158a639" name="curl" arch="src">
  <version epoch="0" ver="7.29.0" rel="42.el7_4.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-34" date="1471435200">- acknowledge the --no-sessionid/CURLOPT_SSL_SESSIONID_CACHE option
  (required by the fix for CVE-2016-5419)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-35" date="1472212800">- fix incorrect use of a previously loaded certificate from file
  (related to CVE-2016-5420)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-36" date="1474372800">- reject negative string lengths in curl_easy_[un]escape() (CVE-2016-7167)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-37" date="1475755200">- fix tight loop in non-blocking TLS handhsake over proxy (#1388162)
- handle cookies with numerical IPv6 address (#1341503)
- make libcurl recognize chacha20-poly1305 and SHA384 cipher-suites (#1374740)
- curl -E: allow to escape ':' in cert nickname (#1376062)
- run automake in %prep to avoid patching Makefile.in files from now on</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-38" date="1486641600">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-39" date="1488369600">- work around race condition in PK11_FindSlotByName() in NSS (#1404815)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-40" date="1490616000">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-41" date="1490788800">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-42" date="1490788801">- fix use of uninitialized variable detected by Covscan</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-42.el7_4.1" date="1508760000">- fix buffer overflow while processing IMAP FETCH response (CVE-2017-1000257)</changelog>
</package>
<package pkgid="762a6d59705b308cae8641033a174af9755223878d3284fbe2e1b300888477e8" name="curl" arch="x86_64">
  <version epoch="0" ver="7.29.0" rel="42.el7_4.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-34" date="1471435200">- acknowledge the --no-sessionid/CURLOPT_SSL_SESSIONID_CACHE option
  (required by the fix for CVE-2016-5419)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-35" date="1472212800">- fix incorrect use of a previously loaded certificate from file
  (related to CVE-2016-5420)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-36" date="1474372800">- reject negative string lengths in curl_easy_[un]escape() (CVE-2016-7167)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-37" date="1475755200">- fix tight loop in non-blocking TLS handhsake over proxy (#1388162)
- handle cookies with numerical IPv6 address (#1341503)
- make libcurl recognize chacha20-poly1305 and SHA384 cipher-suites (#1374740)
- curl -E: allow to escape ':' in cert nickname (#1376062)
- run automake in %prep to avoid patching Makefile.in files from now on</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-38" date="1486641600">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-39" date="1488369600">- work around race condition in PK11_FindSlotByName() in NSS (#1404815)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-40" date="1490616000">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-41" date="1490788800">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-42" date="1490788801">- fix use of uninitialized variable detected by Covscan</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-42.el7_4.1" date="1508760000">- fix buffer overflow while processing IMAP FETCH response (CVE-2017-1000257)</changelog>
</package>
<package pkgid="0560dca490cc2778af519480aa9f9a852f27949aa30499d1b983b5febcea018b" name="curl-debuginfo" arch="i686">
  <version epoch="0" ver="7.29.0" rel="42.el7_4.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-34" date="1471435200">- acknowledge the --no-sessionid/CURLOPT_SSL_SESSIONID_CACHE option
  (required by the fix for CVE-2016-5419)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-35" date="1472212800">- fix incorrect use of a previously loaded certificate from file
  (related to CVE-2016-5420)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-36" date="1474372800">- reject negative string lengths in curl_easy_[un]escape() (CVE-2016-7167)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-37" date="1475755200">- fix tight loop in non-blocking TLS handhsake over proxy (#1388162)
- handle cookies with numerical IPv6 address (#1341503)
- make libcurl recognize chacha20-poly1305 and SHA384 cipher-suites (#1374740)
- curl -E: allow to escape ':' in cert nickname (#1376062)
- run automake in %prep to avoid patching Makefile.in files from now on</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-38" date="1486641600">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-39" date="1488369600">- work around race condition in PK11_FindSlotByName() in NSS (#1404815)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-40" date="1490616000">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-41" date="1490788800">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-42" date="1490788801">- fix use of uninitialized variable detected by Covscan</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-42.el7_4.1" date="1508760000">- fix buffer overflow while processing IMAP FETCH response (CVE-2017-1000257)</changelog>
</package>
<package pkgid="abcd14a70870eb79931d97f6378eda5ed1c22c71eccdb1856c2ebe75df103460" name="curl-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.29.0" rel="42.el7_4.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-34" date="1471435200">- acknowledge the --no-sessionid/CURLOPT_SSL_SESSIONID_CACHE option
  (required by the fix for CVE-2016-5419)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-35" date="1472212800">- fix incorrect use of a previously loaded certificate from file
  (related to CVE-2016-5420)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-36" date="1474372800">- reject negative string lengths in curl_easy_[un]escape() (CVE-2016-7167)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-37" date="1475755200">- fix tight loop in non-blocking TLS handhsake over proxy (#1388162)
- handle cookies with numerical IPv6 address (#1341503)
- make libcurl recognize chacha20-poly1305 and SHA384 cipher-suites (#1374740)
- curl -E: allow to escape ':' in cert nickname (#1376062)
- run automake in %prep to avoid patching Makefile.in files from now on</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-38" date="1486641600">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-39" date="1488369600">- work around race condition in PK11_FindSlotByName() in NSS (#1404815)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-40" date="1490616000">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-41" date="1490788800">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-42" date="1490788801">- fix use of uninitialized variable detected by Covscan</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-42.el7_4.1" date="1508760000">- fix buffer overflow while processing IMAP FETCH response (CVE-2017-1000257)</changelog>
</package>
<package pkgid="d19294a2af291dd8c9291f019ff760579f1f3e1c404253aaf271a39e64d0a608" name="debugmode" arch="i686">
  <version epoch="0" ver="9.49.39" rel="1.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.31-1" date="1465819200">- ipv6: wait for all global IPv6 addresses to leave the "tentative" state
- source_config: tell NetworkManger to load ifcfg file even for NM_CONTROLLED=no
- ifup-aliases: inherit ARPCHECK from parent device
- rhel-dmesg: don't start in containers
- ifup-eth: fix typo in error message (#1038776)
- sysctl.conf: steal comments about /usr,/etc,... from fedora's sysctl.conf
- rwtab: /var/lib/nfs needs to copy the files
- functions: improve killing loops
- ipcalc: detect invalid mask
- ifup: set valid_lft and preferred_lft to forever for static ip
- service: use systemd mangle for given service
- ifup-post: check resolve.conf also with DNS2
- ifdown-post: remove resolv.conf only in specific cases
- spec: ghost /var/log/dmesg
- network-functions: is_available_wait should wait even in the case that is_available returns 2
- autorelabel: turn quota off before relabeling
- autorelabel: call dracut-initramfs-restore before forced reboot</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.32-1" date="1466683200">- ifup-eth: fix setting preferred_lft and valid_lft</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.33-1" date="1468497600">- network: run after network-pre.target</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.34-1" date="1468584000">- import-state: restore also sensitivity part of SELinux context</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.35-1" date="1470139200">- functions: systemctl show now returns an error when unit does not exist</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.36-1" date="1473422400">- import-state: copy just some attributes</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.37-1" date="1473681600">- rhel-import-state: fix broken order of parameters</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.38-1" date="1490875200">- ifdown-eth: we need to flush global scope as well
- killproc/status: add missing '-b &lt;binary&gt;' option
- specfile: mark 'rwtab' and 'statetab' as config files
- spec: we need newer lvm
- rwtab: add /var/lib/systemd/timers
- ifup-eth: remove quote marks
- 9.70-sync: Move everything to github
- 9.70-sync: rwtab updated
- 9.70-sync: service file updated
- 9.70-sync: syconfig.txt updated
- 9.70-sync: systemd/rhel-import-state updated
- 9.70-sync: sysconfig/network-scripts/* updated - part 2
- 9.70-sync: sysconfig/network-scripts/* updated - part 1
- 9.70-sync: rc.d/init.d/network updated
- 9.70-sync: rc.d/init.d/netconsole updated
- 9.70-sync: rc.d/init.d/functions updated
- 9.70-sync: ipv6-6to4.howto example updated
- 9.70-sync: examples/networking/ifcfg-bridge updated
- network: load NetworkManager connection via dbus
- network: check for running NetworkManager via dbus</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1" date="1493812800">- sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
- DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
- re-add missing $HOSTNAME initialization
- ifup: add support for VLAN_EGRESS_PRIORITY_MAP
- rhel-autorelabel: synchronize cached writes before reboot</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1.el7_4.1" date="1509710400">- ARUPDATE option introduced</changelog>
</package>
<package pkgid="b576298cc3efa48e12406465a85e1794f164136c2934965a3551d24dc01f1abe" name="debugmode" arch="x86_64">
  <version epoch="0" ver="9.49.39" rel="1.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.31-1" date="1465819200">- ipv6: wait for all global IPv6 addresses to leave the "tentative" state
- source_config: tell NetworkManger to load ifcfg file even for NM_CONTROLLED=no
- ifup-aliases: inherit ARPCHECK from parent device
- rhel-dmesg: don't start in containers
- ifup-eth: fix typo in error message (#1038776)
- sysctl.conf: steal comments about /usr,/etc,... from fedora's sysctl.conf
- rwtab: /var/lib/nfs needs to copy the files
- functions: improve killing loops
- ipcalc: detect invalid mask
- ifup: set valid_lft and preferred_lft to forever for static ip
- service: use systemd mangle for given service
- ifup-post: check resolve.conf also with DNS2
- ifdown-post: remove resolv.conf only in specific cases
- spec: ghost /var/log/dmesg
- network-functions: is_available_wait should wait even in the case that is_available returns 2
- autorelabel: turn quota off before relabeling
- autorelabel: call dracut-initramfs-restore before forced reboot</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.32-1" date="1466683200">- ifup-eth: fix setting preferred_lft and valid_lft</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.33-1" date="1468497600">- network: run after network-pre.target</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.34-1" date="1468584000">- import-state: restore also sensitivity part of SELinux context</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.35-1" date="1470139200">- functions: systemctl show now returns an error when unit does not exist</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.36-1" date="1473422400">- import-state: copy just some attributes</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.37-1" date="1473681600">- rhel-import-state: fix broken order of parameters</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.38-1" date="1490875200">- ifdown-eth: we need to flush global scope as well
- killproc/status: add missing '-b &lt;binary&gt;' option
- specfile: mark 'rwtab' and 'statetab' as config files
- spec: we need newer lvm
- rwtab: add /var/lib/systemd/timers
- ifup-eth: remove quote marks
- 9.70-sync: Move everything to github
- 9.70-sync: rwtab updated
- 9.70-sync: service file updated
- 9.70-sync: syconfig.txt updated
- 9.70-sync: systemd/rhel-import-state updated
- 9.70-sync: sysconfig/network-scripts/* updated - part 2
- 9.70-sync: sysconfig/network-scripts/* updated - part 1
- 9.70-sync: rc.d/init.d/network updated
- 9.70-sync: rc.d/init.d/netconsole updated
- 9.70-sync: rc.d/init.d/functions updated
- 9.70-sync: ipv6-6to4.howto example updated
- 9.70-sync: examples/networking/ifcfg-bridge updated
- network: load NetworkManager connection via dbus
- network: check for running NetworkManager via dbus</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1" date="1493812800">- sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
- DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
- re-add missing $HOSTNAME initialization
- ifup: add support for VLAN_EGRESS_PRIORITY_MAP
- rhel-autorelabel: synchronize cached writes before reboot</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1.el7_4.1" date="1509710400">- ARUPDATE option introduced</changelog>
</package>
<package pkgid="39dabcc0748f93de018232f909abac14f2b590c1984acc7b971c5a369897512c" name="device-mapper-multipath" arch="i686">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="0ad09b2f989494577333fe1da7dfc80709834ee83a39b5313e187002f8fbf5bf" name="device-mapper-multipath" arch="src">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="57cd4ad19719c2bb85f0eab02dcc21ece7f37b25c2b3c9f0f835484e6ccbcee3" name="device-mapper-multipath" arch="src">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="3920b07249e328ab638613978d098ea5a8f50afd9350dc130d58744af31ec58c" name="device-mapper-multipath" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="d6221fbd445ae1b14a3e699fd6d8805253c615b6fa1f99e95a9e35b47f67783b" name="device-mapper-multipath-debuginfo" arch="i686">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="38cc8dae8fc3726391256781db23de00391e0822f65a63533ba62b936bc86add" name="device-mapper-multipath-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="4e9796bcd271593bd5a83f491390218dd0e90ad917effb194e74bf6e3439a3f4" name="device-mapper-multipath-devel" arch="i686">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="47fecbda748d2a3ea9c8ee73e934c8ac14ebe119f2eb6e8ef7aa319b07250ba9" name="device-mapper-multipath-devel" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="5962a2c002921bdf9d2012637185ee7f277f62ded9147107b7ab338728ceabfa" name="device-mapper-multipath-libs" arch="i686">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="f4c0791849792dd2e629c6aafbcbeb217aa3cfcd80ae6cfb563fa4f8413fd4d1" name="device-mapper-multipath-libs" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="d197ab5bcebffda2c26bea9f53f33bd607c301d74a2778299c9fd97cdef67c47" name="device-mapper-multipath-sysvinit" arch="i686">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="9bf596bdc62a6b6c462c77986de795fa1c2ffb40174f8adf04cb978d76edfb29" name="device-mapper-multipath-sysvinit" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="d0d078a0d622cc9f02c7e9a42b2a81811c055f7096123ee41ae6e5cbb6a18be3" name="device-mapper-persistent-data" arch="i686">
  <version epoch="0" ver="0.7.0" rel="0.1.rc6.el7_4.1"/>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-0.1.rc6" date="1457524800">- Add new fields to thin_ls: MAPPED_BYTES, EXCLUSIVE_BYTES and SHARED_BYTES.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-0.1.rc8" date="1462363200">- Fixes for thin_trim and thin_repair.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-1" date="1468238400">- Fixes providing proper use of compiler flags.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-2" date="1469102400">- Improve documentation and messages on output file preallocation
  when using thin_repair and thin_restore.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.3-1" date="1469188800">- Fix regression in thin_repair and thin_restore so it works again
  when using device as output.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc3" date="1489665600">- Update to latest upstream release including various bug fixes and new features.
- New thin_show_duplicates command.
- Add '--skip-mappings' and '--format custom' options to thin_dump.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc4" date="1490097600">- Add support for cache metadata format version 2 in cache tools.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc5" date="1490184000">- Switch to a faster implementation of crc32 used for checksums.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc6" date="1490616000">- Don't open devices as writeable if --clear-needs-check-flag is not set.
- Fix cache metadata format version 2 superblock packing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.7.0-0.1-rc6.el7_4.1" date="1511179200">- Fix v2 metadata corruption in cache_restore.</changelog>
</package>
<package pkgid="896c57105124924ba00b8fed6aae2b92ac0dcaad61e92b2df4a5124d636b3937" name="device-mapper-persistent-data" arch="src">
  <version epoch="0" ver="0.7.0" rel="0.1.rc6.el7_4.1"/>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-0.1.rc6" date="1457524800">- Add new fields to thin_ls: MAPPED_BYTES, EXCLUSIVE_BYTES and SHARED_BYTES.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-0.1.rc8" date="1462363200">- Fixes for thin_trim and thin_repair.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-1" date="1468238400">- Fixes providing proper use of compiler flags.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-2" date="1469102400">- Improve documentation and messages on output file preallocation
  when using thin_repair and thin_restore.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.3-1" date="1469188800">- Fix regression in thin_repair and thin_restore so it works again
  when using device as output.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc3" date="1489665600">- Update to latest upstream release including various bug fixes and new features.
- New thin_show_duplicates command.
- Add '--skip-mappings' and '--format custom' options to thin_dump.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc4" date="1490097600">- Add support for cache metadata format version 2 in cache tools.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc5" date="1490184000">- Switch to a faster implementation of crc32 used for checksums.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc6" date="1490616000">- Don't open devices as writeable if --clear-needs-check-flag is not set.
- Fix cache metadata format version 2 superblock packing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.7.0-0.1-rc6.el7_4.1" date="1511179200">- Fix v2 metadata corruption in cache_restore.</changelog>
</package>
<package pkgid="807411d4218bfa5428ef3469c6f0add75fbac230fef02ad830f2d9e8d5f5df3d" name="device-mapper-persistent-data" arch="src">
  <version epoch="0" ver="0.7.0" rel="0.1.rc6.el7_4.1"/>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-0.1.rc6" date="1457524800">- Add new fields to thin_ls: MAPPED_BYTES, EXCLUSIVE_BYTES and SHARED_BYTES.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-0.1.rc8" date="1462363200">- Fixes for thin_trim and thin_repair.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-1" date="1468238400">- Fixes providing proper use of compiler flags.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-2" date="1469102400">- Improve documentation and messages on output file preallocation
  when using thin_repair and thin_restore.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.3-1" date="1469188800">- Fix regression in thin_repair and thin_restore so it works again
  when using device as output.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc3" date="1489665600">- Update to latest upstream release including various bug fixes and new features.
- New thin_show_duplicates command.
- Add '--skip-mappings' and '--format custom' options to thin_dump.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc4" date="1490097600">- Add support for cache metadata format version 2 in cache tools.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc5" date="1490184000">- Switch to a faster implementation of crc32 used for checksums.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc6" date="1490616000">- Don't open devices as writeable if --clear-needs-check-flag is not set.
- Fix cache metadata format version 2 superblock packing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.7.0-0.1-rc6.el7_4.1" date="1511179200">- Fix v2 metadata corruption in cache_restore.</changelog>
</package>
<package pkgid="ef4c2eca2b9bdaf718a0b11af0343ba75a48eb6089791ec434ced5b6b5c38730" name="device-mapper-persistent-data" arch="x86_64">
  <version epoch="0" ver="0.7.0" rel="0.1.rc6.el7_4.1"/>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-0.1.rc6" date="1457524800">- Add new fields to thin_ls: MAPPED_BYTES, EXCLUSIVE_BYTES and SHARED_BYTES.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-0.1.rc8" date="1462363200">- Fixes for thin_trim and thin_repair.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-1" date="1468238400">- Fixes providing proper use of compiler flags.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-2" date="1469102400">- Improve documentation and messages on output file preallocation
  when using thin_repair and thin_restore.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.3-1" date="1469188800">- Fix regression in thin_repair and thin_restore so it works again
  when using device as output.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc3" date="1489665600">- Update to latest upstream release including various bug fixes and new features.
- New thin_show_duplicates command.
- Add '--skip-mappings' and '--format custom' options to thin_dump.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc4" date="1490097600">- Add support for cache metadata format version 2 in cache tools.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc5" date="1490184000">- Switch to a faster implementation of crc32 used for checksums.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc6" date="1490616000">- Don't open devices as writeable if --clear-needs-check-flag is not set.
- Fix cache metadata format version 2 superblock packing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.7.0-0.1-rc6.el7_4.1" date="1511179200">- Fix v2 metadata corruption in cache_restore.</changelog>
</package>
<package pkgid="d10b4eac882f9386389a041dab12fd7adc73c61dd84a07ac24970e8eab9cca45" name="device-mapper-persistent-data-debuginfo" arch="i686">
  <version epoch="0" ver="0.7.0" rel="0.1.rc6.el7_4.1"/>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-0.1.rc6" date="1457524800">- Add new fields to thin_ls: MAPPED_BYTES, EXCLUSIVE_BYTES and SHARED_BYTES.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-0.1.rc8" date="1462363200">- Fixes for thin_trim and thin_repair.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-1" date="1468238400">- Fixes providing proper use of compiler flags.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-2" date="1469102400">- Improve documentation and messages on output file preallocation
  when using thin_repair and thin_restore.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.3-1" date="1469188800">- Fix regression in thin_repair and thin_restore so it works again
  when using device as output.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc3" date="1489665600">- Update to latest upstream release including various bug fixes and new features.
- New thin_show_duplicates command.
- Add '--skip-mappings' and '--format custom' options to thin_dump.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc4" date="1490097600">- Add support for cache metadata format version 2 in cache tools.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc5" date="1490184000">- Switch to a faster implementation of crc32 used for checksums.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc6" date="1490616000">- Don't open devices as writeable if --clear-needs-check-flag is not set.
- Fix cache metadata format version 2 superblock packing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.7.0-0.1-rc6.el7_4.1" date="1511179200">- Fix v2 metadata corruption in cache_restore.</changelog>
</package>
<package pkgid="0ee50b6538683a85fa721d3e354d6015abd84fec0c9b488bfa51d9f50c0e317e" name="device-mapper-persistent-data-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7.0" rel="0.1.rc6.el7_4.1"/>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-0.1.rc6" date="1457524800">- Add new fields to thin_ls: MAPPED_BYTES, EXCLUSIVE_BYTES and SHARED_BYTES.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-0.1.rc8" date="1462363200">- Fixes for thin_trim and thin_repair.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-1" date="1468238400">- Fixes providing proper use of compiler flags.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-2" date="1469102400">- Improve documentation and messages on output file preallocation
  when using thin_repair and thin_restore.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.3-1" date="1469188800">- Fix regression in thin_repair and thin_restore so it works again
  when using device as output.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc3" date="1489665600">- Update to latest upstream release including various bug fixes and new features.
- New thin_show_duplicates command.
- Add '--skip-mappings' and '--format custom' options to thin_dump.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc4" date="1490097600">- Add support for cache metadata format version 2 in cache tools.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc5" date="1490184000">- Switch to a faster implementation of crc32 used for checksums.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc6" date="1490616000">- Don't open devices as writeable if --clear-needs-check-flag is not set.
- Fix cache metadata format version 2 superblock packing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.7.0-0.1-rc6.el7_4.1" date="1511179200">- Fix v2 metadata corruption in cache_restore.</changelog>
</package>
<package pkgid="2acb0f47a328053ff1085d6013d297fb366b691f065249a2ef60d07435a598a0" name="dhclient" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.1"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-49" date="1487246400">- Resolves: #1355827 - dhcpd has a segfault at startup with a big ip range</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246401">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.1" date="1516881600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="ef294f6617d285dfe32444ec888c2c129ddcda103e6c81accc8cc161ec9b887f" name="dhclient" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.1"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-49" date="1487246400">- Resolves: #1355827 - dhcpd has a segfault at startup with a big ip range</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246401">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.1" date="1516881600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="5523d4173b4520fb8c2d6291198d1240da095c1fb0e7db2dce0b35594547595f" name="dhclient" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="64999daba3847479e95bbf19e86ed106e8b16a6cd1c2b7e62ab637740af51d38" name="dhclient" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="b54c6f8529a5f31661c15991951986fe3ac174abed89b91ed43d4da892467eac" name="dhclient" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="8411050b2c02628766c99976f1512ec449ddd5d5ded4d3ea5175348397b25a47" name="dhclient" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="d4ddfee6e075e713ca66bfba813b89757ee3fe19ca5dfb4064ce19067818b795" name="dhclient" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="b677f15819095dad90b63b431c3886b0e9b97639b12d922df082bf4d7ec5d3bd" name="dhclient" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="6862740b93a0adc536ba40fd36a07efc85c79ed6acdd034a9112346c8b46c432" name="dhclient" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="301b28ef8ca9c47abbc610311cecbab443e9b0216f634bf5dfc3275554caab5e" name="dhcp" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.1"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-49" date="1487246400">- Resolves: #1355827 - dhcpd has a segfault at startup with a big ip range</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246401">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.1" date="1516881600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="d0a8e3dc8bdd6e5dc0c755724590f9e0990065a4e208e320ebeb8834486a9a05" name="dhcp" arch="src">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.1"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-49" date="1487246400">- Resolves: #1355827 - dhcpd has a segfault at startup with a big ip range</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246401">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.1" date="1516881600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="e0021cef5f690dc4f075958eecad561c460e7b02dc36333e8c29b23ed51db79c" name="dhcp" arch="src">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.1"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-49" date="1487246400">- Resolves: #1355827 - dhcpd has a segfault at startup with a big ip range</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246401">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.1" date="1516881600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="18c8939320bb8af24e618464f5de242374573c794c7288178f0e1a58446f5a15" name="dhcp" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.1"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-49" date="1487246400">- Resolves: #1355827 - dhcpd has a segfault at startup with a big ip range</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246401">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.1" date="1516881600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="18bf18ece5b7e35f949c54ac33a388fbb355bf9362dffba94ca910634df21a8f" name="dhcp" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="98ec0669f1f9095fb49002d2e404eb010305503a4efb87a49ad86dd96b7dd215" name="dhcp" arch="src">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="2eb379959c442a636d64538454c942ca4bd2de8fe2b4c300e89bd3f29fe91503" name="dhcp" arch="src">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="ddd7b4cd0d53cb1ee1c9d3e8e288d8c771babf863c0a2a943d1901fb2bc87082" name="dhcp" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="6452c889c21ef11c9fbeabe50e3e8aa37668caf1f98c02edf0986da8d4869aac" name="dhcp" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="f46a5278c6d15538dc9099d61ee06331041e36678d9870299c4ef3628e45c977" name="dhcp" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="91db73f922c34d200a270a436cb2b8464b7f435184925a1cfae6d1c2ffa5840e" name="dhcp" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="2f4ea41b61a2bc8d4117eb713cc5bfe2746e70da76e39cfbf80ec9c119877e37" name="dhcp" arch="src">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="ccdceae9a6955318cf9e96ddba4040b2bf14eaa752261851bf54876dde93d4f0" name="dhcp" arch="src">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="7a4d2e08cc70891c72a454052e8eac7aff8916525f5900e22b158fad2d902f5b" name="dhcp" arch="src">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="02b06d572fe21218262685818e01643dedb69245bb11e88fae5e256afa7a59e2" name="dhcp" arch="src">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="087ec009f3cfc7d36e90937605cb7948ea66f14b67529b2081007e0b75ed9793" name="dhcp" arch="src">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="9e1e6440ff4f70bfbd9000db5c27eb073671c7333378d9edf5ebcb748b1b578f" name="dhcp" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="7434fb379fe869711e31d2040cacea52d632c0a2a3b8457fcca431b510aab567" name="dhcp" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="e8116251029a94c4f7002b7421724555ae030851a257568d437fa6ce72840688" name="dhcp-common" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.1"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-49" date="1487246400">- Resolves: #1355827 - dhcpd has a segfault at startup with a big ip range</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246401">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.1" date="1516881600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="dcf2a6a4003dd3f4ad43e0e36e9b6399ff4b9110e8508d3b6199053097ef4d22" name="dhcp-common" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.1"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-49" date="1487246400">- Resolves: #1355827 - dhcpd has a segfault at startup with a big ip range</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246401">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.1" date="1516881600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="0dff5e8afdeeda5e4629df60feecf3347199915911c0b74cc93e130b3a427732" name="dhcp-common" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="3c21de1ad4342c6b03c147c111b4186df4fc556936561beaa09f7d8b000821ea" name="dhcp-common" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="80bdadaa57a43c90019f14ffedaa2a614ec7eb84240b9ef6a6589fe452cb74cd" name="dhcp-common" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="cf67e1d782de056dfde8db6e476ac4aadd5d79a4d8451ac9372560a2ed806eee" name="dhcp-common" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="178f8951ce6f04f8f34d3197551c01ea8d55fe0ac3c58d4e0141532a5030effe" name="dhcp-common" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="46cafda580a39ff8af695e0bde7474d61028fe7270525ac01933dbfa2f7310b5" name="dhcp-common" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="eb7852794d1578569ea76254c1d014a9c7022790a8ecd388e1c587108f74eaef" name="dhcp-common" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="3cd9b4bcd03f93dfafc7840737990e9f823fde0489958b97dd87534bcd93c290" name="dhcp-debuginfo" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.1"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-49" date="1487246400">- Resolves: #1355827 - dhcpd has a segfault at startup with a big ip range</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246401">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.1" date="1516881600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="fe933055373f6e6776db086bb75b263894b6abcf5ee26287dda81dd77a0c0161" name="dhcp-debuginfo" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.1"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-49" date="1487246400">- Resolves: #1355827 - dhcpd has a segfault at startup with a big ip range</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246401">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.1" date="1516881600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="a88b077ed883ed970cda5e13338d96a4629a97a07d0bb25662137eab4c81fd1f" name="dhcp-debuginfo" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="c52b98cde2a44518dc27c64d65df87aa8a13b751d77c5ff883f6d1b1e227c328" name="dhcp-debuginfo" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="17177606d000420f59b2d49ba4607f76f7632e655e6ed9c94b15f6da6ec74572" name="dhcp-debuginfo" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="772587566b1076b1b1747aa424d53ea74b9fa9bddc748b4f5066b84cb0c27470" name="dhcp-debuginfo" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="d6595268f995c7ffa8ce70c09f9caca40dd163e054a667391b01e3c1aed45abd" name="dhcp-debuginfo" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="02021ba496d424c464ebdbacd54dbb2621a482e5c2bed884efba3747415aee8b" name="dhcp-debuginfo" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="3cb5f06b1af8e0cb9dfd1546e52601c5cc2c7498a86c405b30abcf03066e0602" name="dhcp-debuginfo" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="c1e258cc176206670c06c483ca1e2de02f355f343b4054dbf6ed8904ceaedb0c" name="dhcp-devel" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.1"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-49" date="1487246400">- Resolves: #1355827 - dhcpd has a segfault at startup with a big ip range</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246401">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.1" date="1516881600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="e2461c7abcb83e93051439dd9527822f67c4c706bec7fca65ce8eea644676f68" name="dhcp-devel" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.1"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-49" date="1487246400">- Resolves: #1355827 - dhcpd has a segfault at startup with a big ip range</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246401">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.1" date="1516881600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="dcb9080805d53b01b73dd1e51f97e8d08c0b196ea0803ab79e9f191efa8e227d" name="dhcp-devel" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="5be7d3a596d120f61b5171b558c4d020a95e0662540eb433f0f62429a99329dc" name="dhcp-devel" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="ccc1e69aeb8d4093c9402d4475a00eed7834a5b3abe4daf438dd2145448bbcaf" name="dhcp-devel" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="d6aed8a53abda43c94b7d735c9348ac8d3a1062f29fe9696ca892c4f22295cda" name="dhcp-devel" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="c9a585d2f6bdb39ba8eee743f01c05ab68bd5e8c789c82fd6a28591f6de866b6" name="dhcp-devel" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="b07fdbad727fe933987c45704f91bec3caa9e5336938535310c85798341f27d3" name="dhcp-devel" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="7a13bf06a8d04a485f180bd0c70fba190903235d3f1735ac05d9d7483f4022ef" name="dhcp-devel" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="98e956d8b9195891781782b743a4dc3cf4aef00a23d17103341d0e1321e43701" name="dhcp-libs" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.1"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-49" date="1487246400">- Resolves: #1355827 - dhcpd has a segfault at startup with a big ip range</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246401">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.1" date="1516881600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="64a093a5677e1fb046fbd4fb72c1ea1139e67cf426d31067c554343a158b8342" name="dhcp-libs" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.1"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-49" date="1487246400">- Resolves: #1355827 - dhcpd has a segfault at startup with a big ip range</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246401">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.1" date="1516881600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="83b767ec5e50d955fd65d81ebfa3d945e54256adbd89255e4986b315ce2a4668" name="dhcp-libs" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="21aa7e1158e5deeed1c76c0ef8d6312dcaaa6a14237fda6d37a574469598ea8a" name="dhcp-libs" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7.centos.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="d792b7c5a1672fdf48579ed952105d9a3d1f6eaccd2d819800eb95640bff2be7" name="dhcp-libs" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="e7d3249f57d79796df46d6bb0aa2129767c59899f9219cd4ec33e8178ef5a581" name="dhcp-libs" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="54cce06e57ff130d6bdbcc9187022a0c6fe6b22ceea8de802887e7d9ce6d972e" name="dhcp-libs" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="51dea72fa291ac0da8dfc0df2daeba35286a46bd52a904f9b7f7b41c6278f88d" name="dhcp-libs" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="94044850e2b1e9ee7b3f012472343f02a98033b2aaa89b12073ac512860bc413" name="dhcp-libs" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-58.el7.centos.3" date="1520856000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="af7fba86dbbbd1014987683a256e50849562f34062427167b0bcdb89fdc45d87" name="dleyna-server" arch="i686">
  <version epoch="0" ver="0.5.0" rel="2.el7_4"/>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.4.0-1" date="1433246400">- Initial RHEL import
Resolves: #1219532</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.5.0-1" date="1488542400">- Update to 0.5.0
Resolves: #1386847</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.5.0-2" date="1507204800">- Use arch-specific Requires on dleyna-connector-dbus
Resolves: #1479486</changelog>
</package>
<package pkgid="a082ed8507203bfd42a9defc176accf731e5f988f822e7367124c35c3c495d03" name="dleyna-server" arch="src">
  <version epoch="0" ver="0.5.0" rel="2.el7_4"/>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.4.0-1" date="1433246400">- Initial RHEL import
Resolves: #1219532</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.5.0-1" date="1488542400">- Update to 0.5.0
Resolves: #1386847</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.5.0-2" date="1507204800">- Use arch-specific Requires on dleyna-connector-dbus
Resolves: #1479486</changelog>
</package>
<package pkgid="7fdf8bfa5b3582ec2de80e3079706645789d736af2b3f0288fd2546c468adb72" name="dleyna-server" arch="src">
  <version epoch="0" ver="0.5.0" rel="2.el7_4"/>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.4.0-1" date="1433246400">- Initial RHEL import
Resolves: #1219532</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.5.0-1" date="1488542400">- Update to 0.5.0
Resolves: #1386847</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.5.0-2" date="1507204800">- Use arch-specific Requires on dleyna-connector-dbus
Resolves: #1479486</changelog>
</package>
<package pkgid="0ad5a68d850e0a4b6c99925b1dd122397b187d745445248aed049f9c7c09ddf2" name="dleyna-server" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="2.el7_4"/>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.4.0-1" date="1433246400">- Initial RHEL import
Resolves: #1219532</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.5.0-1" date="1488542400">- Update to 0.5.0
Resolves: #1386847</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.5.0-2" date="1507204800">- Use arch-specific Requires on dleyna-connector-dbus
Resolves: #1479486</changelog>
</package>
<package pkgid="9224496936d0c5e0e39ca9d3a76822bc8cd18cf09092850a2192c31d02fa7bd7" name="dleyna-server-debuginfo" arch="i686">
  <version epoch="0" ver="0.5.0" rel="2.el7_4"/>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.4.0-1" date="1433246400">- Initial RHEL import
Resolves: #1219532</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.5.0-1" date="1488542400">- Update to 0.5.0
Resolves: #1386847</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.5.0-2" date="1507204800">- Use arch-specific Requires on dleyna-connector-dbus
Resolves: #1479486</changelog>
</package>
<package pkgid="6a1ebae71b4de6ca89f0a2b9520f88b20e35a2b1474fc9d52468672d65a7e3da" name="dleyna-server-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="2.el7_4"/>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.4.0-1" date="1433246400">- Initial RHEL import
Resolves: #1219532</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.5.0-1" date="1488542400">- Update to 0.5.0
Resolves: #1386847</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.5.0-2" date="1507204800">- Use arch-specific Requires on dleyna-connector-dbus
Resolves: #1479486</changelog>
</package>
<package pkgid="c3b4b790f70d3cc9b45ef085792789f41990148da711c22318cbb12487f086b3" name="dnsmasq" arch="i686">
  <version epoch="0" ver="2.76" rel="2.el7_4.2"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-16" date="1464609600">- Resolves: #1275626 - use the patch</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-17" date="1464696000">- Resolves: #1275626 - modify the patch using new information</changelog>
  <changelog author="root - 2.66-18" date="1472212800">- Resolves: #1358427 - dhcp errors with hostnames beginning with numbers</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-19" date="1473163200">- Resolves: #1367772 - dns not updated after sleep and resume laptop</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-20" date="1473336000">- Related: #1367772 - additional upstream patch</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-21" date="1473768000">- Related: #1367772 - fix dns server update</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-1" date="1487678400">- Rebase to 2.76 (#1375527)
- Include also dhcp_release6 (#1375569)
- Fix compilation warnings
- Correct manual about interface aliases, warn if used without --bind*</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2" date="1489579200">- Fix a few coverity warnings
- package is dual-licensed GPL v2 or v3
- don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2.1" date="1506427200">- Fix CVE-2017-14491
- Fix CVE-2017-14492
- Fix CVE-2017-14493
- Fix CVE-2017-14494
- Fix CVE-2017-14496
- Fix CVE-2017-14495
- extra fixes</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2.2" date="1506513600">- Small correction of CVE-2017-14491</changelog>
</package>
<package pkgid="d8a40e72432fc9bae48b19028f3efe837e8966dee5bf994782b8b8a9e6bb3a49" name="dnsmasq" arch="src">
  <version epoch="0" ver="2.76" rel="2.el7_4.2"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-16" date="1464609600">- Resolves: #1275626 - use the patch</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-17" date="1464696000">- Resolves: #1275626 - modify the patch using new information</changelog>
  <changelog author="root - 2.66-18" date="1472212800">- Resolves: #1358427 - dhcp errors with hostnames beginning with numbers</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-19" date="1473163200">- Resolves: #1367772 - dns not updated after sleep and resume laptop</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-20" date="1473336000">- Related: #1367772 - additional upstream patch</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-21" date="1473768000">- Related: #1367772 - fix dns server update</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-1" date="1487678400">- Rebase to 2.76 (#1375527)
- Include also dhcp_release6 (#1375569)
- Fix compilation warnings
- Correct manual about interface aliases, warn if used without --bind*</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2" date="1489579200">- Fix a few coverity warnings
- package is dual-licensed GPL v2 or v3
- don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2.1" date="1506427200">- Fix CVE-2017-14491
- Fix CVE-2017-14492
- Fix CVE-2017-14493
- Fix CVE-2017-14494
- Fix CVE-2017-14496
- Fix CVE-2017-14495
- extra fixes</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2.2" date="1506513600">- Small correction of CVE-2017-14491</changelog>
</package>
<package pkgid="7466cb6035c15a3132b7792ba31c180869e6f95ba45f81aff8508cbdcfac63c0" name="dnsmasq" arch="src">
  <version epoch="0" ver="2.76" rel="2.el7_4.2"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-16" date="1464609600">- Resolves: #1275626 - use the patch</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-17" date="1464696000">- Resolves: #1275626 - modify the patch using new information</changelog>
  <changelog author="root - 2.66-18" date="1472212800">- Resolves: #1358427 - dhcp errors with hostnames beginning with numbers</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-19" date="1473163200">- Resolves: #1367772 - dns not updated after sleep and resume laptop</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-20" date="1473336000">- Related: #1367772 - additional upstream patch</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-21" date="1473768000">- Related: #1367772 - fix dns server update</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-1" date="1487678400">- Rebase to 2.76 (#1375527)
- Include also dhcp_release6 (#1375569)
- Fix compilation warnings
- Correct manual about interface aliases, warn if used without --bind*</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2" date="1489579200">- Fix a few coverity warnings
- package is dual-licensed GPL v2 or v3
- don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2.1" date="1506427200">- Fix CVE-2017-14491
- Fix CVE-2017-14492
- Fix CVE-2017-14493
- Fix CVE-2017-14494
- Fix CVE-2017-14496
- Fix CVE-2017-14495
- extra fixes</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2.2" date="1506513600">- Small correction of CVE-2017-14491</changelog>
</package>
<package pkgid="0be0deee28c2ea681d0b390bc55d92ce82b45bdb98b38ef04d74e2e09ce17f30" name="dnsmasq" arch="x86_64">
  <version epoch="0" ver="2.76" rel="2.el7_4.2"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-16" date="1464609600">- Resolves: #1275626 - use the patch</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-17" date="1464696000">- Resolves: #1275626 - modify the patch using new information</changelog>
  <changelog author="root - 2.66-18" date="1472212800">- Resolves: #1358427 - dhcp errors with hostnames beginning with numbers</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-19" date="1473163200">- Resolves: #1367772 - dns not updated after sleep and resume laptop</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-20" date="1473336000">- Related: #1367772 - additional upstream patch</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-21" date="1473768000">- Related: #1367772 - fix dns server update</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-1" date="1487678400">- Rebase to 2.76 (#1375527)
- Include also dhcp_release6 (#1375569)
- Fix compilation warnings
- Correct manual about interface aliases, warn if used without --bind*</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2" date="1489579200">- Fix a few coverity warnings
- package is dual-licensed GPL v2 or v3
- don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2.1" date="1506427200">- Fix CVE-2017-14491
- Fix CVE-2017-14492
- Fix CVE-2017-14493
- Fix CVE-2017-14494
- Fix CVE-2017-14496
- Fix CVE-2017-14495
- extra fixes</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2.2" date="1506513600">- Small correction of CVE-2017-14491</changelog>
</package>
<package pkgid="aca06375e8c54b7f021a17e01d09e1a84773f6692239947db900e6c37eabab29" name="dnsmasq-debuginfo" arch="i686">
  <version epoch="0" ver="2.76" rel="2.el7_4.2"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-16" date="1464609600">- Resolves: #1275626 - use the patch</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-17" date="1464696000">- Resolves: #1275626 - modify the patch using new information</changelog>
  <changelog author="root - 2.66-18" date="1472212800">- Resolves: #1358427 - dhcp errors with hostnames beginning with numbers</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-19" date="1473163200">- Resolves: #1367772 - dns not updated after sleep and resume laptop</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-20" date="1473336000">- Related: #1367772 - additional upstream patch</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-21" date="1473768000">- Related: #1367772 - fix dns server update</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-1" date="1487678400">- Rebase to 2.76 (#1375527)
- Include also dhcp_release6 (#1375569)
- Fix compilation warnings
- Correct manual about interface aliases, warn if used without --bind*</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2" date="1489579200">- Fix a few coverity warnings
- package is dual-licensed GPL v2 or v3
- don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2.1" date="1506427200">- Fix CVE-2017-14491
- Fix CVE-2017-14492
- Fix CVE-2017-14493
- Fix CVE-2017-14494
- Fix CVE-2017-14496
- Fix CVE-2017-14495
- extra fixes</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2.2" date="1506513600">- Small correction of CVE-2017-14491</changelog>
</package>
<package pkgid="4530c8c5f3e3cad15f3b8f5bb10e1876def6660f7a914b0e5d13f9b02d67cb0a" name="dnsmasq-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.76" rel="2.el7_4.2"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-16" date="1464609600">- Resolves: #1275626 - use the patch</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-17" date="1464696000">- Resolves: #1275626 - modify the patch using new information</changelog>
  <changelog author="root - 2.66-18" date="1472212800">- Resolves: #1358427 - dhcp errors with hostnames beginning with numbers</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-19" date="1473163200">- Resolves: #1367772 - dns not updated after sleep and resume laptop</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-20" date="1473336000">- Related: #1367772 - additional upstream patch</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-21" date="1473768000">- Related: #1367772 - fix dns server update</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-1" date="1487678400">- Rebase to 2.76 (#1375527)
- Include also dhcp_release6 (#1375569)
- Fix compilation warnings
- Correct manual about interface aliases, warn if used without --bind*</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2" date="1489579200">- Fix a few coverity warnings
- package is dual-licensed GPL v2 or v3
- don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2.1" date="1506427200">- Fix CVE-2017-14491
- Fix CVE-2017-14492
- Fix CVE-2017-14493
- Fix CVE-2017-14494
- Fix CVE-2017-14496
- Fix CVE-2017-14495
- extra fixes</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2.2" date="1506513600">- Small correction of CVE-2017-14491</changelog>
</package>
<package pkgid="9cd7ee1ca2d043893f7b6754030d3831dda6dbaebbbf1a97f559e831891828c6" name="dnsmasq-utils" arch="i686">
  <version epoch="0" ver="2.76" rel="2.el7_4.2"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-16" date="1464609600">- Resolves: #1275626 - use the patch</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-17" date="1464696000">- Resolves: #1275626 - modify the patch using new information</changelog>
  <changelog author="root - 2.66-18" date="1472212800">- Resolves: #1358427 - dhcp errors with hostnames beginning with numbers</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-19" date="1473163200">- Resolves: #1367772 - dns not updated after sleep and resume laptop</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-20" date="1473336000">- Related: #1367772 - additional upstream patch</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-21" date="1473768000">- Related: #1367772 - fix dns server update</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-1" date="1487678400">- Rebase to 2.76 (#1375527)
- Include also dhcp_release6 (#1375569)
- Fix compilation warnings
- Correct manual about interface aliases, warn if used without --bind*</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2" date="1489579200">- Fix a few coverity warnings
- package is dual-licensed GPL v2 or v3
- don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2.1" date="1506427200">- Fix CVE-2017-14491
- Fix CVE-2017-14492
- Fix CVE-2017-14493
- Fix CVE-2017-14494
- Fix CVE-2017-14496
- Fix CVE-2017-14495
- extra fixes</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2.2" date="1506513600">- Small correction of CVE-2017-14491</changelog>
</package>
<package pkgid="6c1e5b923af5dfed61d2313bbc29be9d545beb58b198db75d4e119bde6ab29f5" name="dnsmasq-utils" arch="x86_64">
  <version epoch="0" ver="2.76" rel="2.el7_4.2"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-16" date="1464609600">- Resolves: #1275626 - use the patch</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-17" date="1464696000">- Resolves: #1275626 - modify the patch using new information</changelog>
  <changelog author="root - 2.66-18" date="1472212800">- Resolves: #1358427 - dhcp errors with hostnames beginning with numbers</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-19" date="1473163200">- Resolves: #1367772 - dns not updated after sleep and resume laptop</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-20" date="1473336000">- Related: #1367772 - additional upstream patch</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-21" date="1473768000">- Related: #1367772 - fix dns server update</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-1" date="1487678400">- Rebase to 2.76 (#1375527)
- Include also dhcp_release6 (#1375569)
- Fix compilation warnings
- Correct manual about interface aliases, warn if used without --bind*</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2" date="1489579200">- Fix a few coverity warnings
- package is dual-licensed GPL v2 or v3
- don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2.1" date="1506427200">- Fix CVE-2017-14491
- Fix CVE-2017-14492
- Fix CVE-2017-14493
- Fix CVE-2017-14494
- Fix CVE-2017-14496
- Fix CVE-2017-14495
- extra fixes</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2.2" date="1506513600">- Small correction of CVE-2017-14491</changelog>
</package>
<package pkgid="aaccfe279ef30905c03702252a9d59c435fae740466b4a83616d67e545c29a13" name="dracut" arch="i686">
  <version epoch="0" ver="033" rel="502.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="5486436ac22b33ce6ca86cdeee1dc16ef7eab3f62dc5e188c699e20bce64524e" name="dracut" arch="src">
  <version epoch="0" ver="033" rel="502.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="32f081ceabeac40cc80598ad41dfb75fe81e9ebae77fbb654546dcc1c61d2502" name="dracut" arch="src">
  <version epoch="0" ver="033" rel="502.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="aa57407904f2f4c3e1f164657fb5c731bfd11b391ff8814c1c085a3459db1efc" name="dracut" arch="x86_64">
  <version epoch="0" ver="033" rel="502.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="121b64aac8c1a49181a904b597a209bc666b1d3b156e21f31676ef6cc16eaab0" name="dracut-caps" arch="i686">
  <version epoch="0" ver="033" rel="502.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="48fc907a0705caf019a549df559e9c3eed5cd5d83349b5e5b727ef9719d37290" name="dracut-caps" arch="x86_64">
  <version epoch="0" ver="033" rel="502.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="3f2f39f36a6041ca67a768b82907e2e0da83c51fad5d433c193dd6d74216216d" name="dracut-config-generic" arch="i686">
  <version epoch="0" ver="033" rel="502.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="725f7d4d43444331b97280c7bec0c8f3f365059408d773c0083054bb2fec7f84" name="dracut-config-generic" arch="x86_64">
  <version epoch="0" ver="033" rel="502.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="aa3a773755d6ff66c110775415452a1461ac1cc3141fd29ae2e025a265905950" name="dracut-config-rescue" arch="i686">
  <version epoch="0" ver="033" rel="502.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="1a47d304d20fb15e53503368cd67385d27d15a90c2d3ac72654bd69bce945306" name="dracut-config-rescue" arch="x86_64">
  <version epoch="0" ver="033" rel="502.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="6922702780fddd7e8aec98d4b732fe11032e12382982ae9262e8d292e2cc816c" name="dracut-debuginfo" arch="i686">
  <version epoch="0" ver="033" rel="502.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="5580ba9655db34dcd6ae3476e9edf08930144a61d01c0d63067c3dd9b209f4a3" name="dracut-debuginfo" arch="x86_64">
  <version epoch="0" ver="033" rel="502.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="3d41c911ffb388d258943367e81cb0a636fac914fc1c47f4061fb80861ce3d90" name="dracut-fips" arch="i686">
  <version epoch="0" ver="033" rel="502.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="5ac6bae6ce5a5798a6726f19e16b45b160224344ee68f9cc110801c2e280d80b" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="033" rel="502.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="bae08ceb56f5281bd0a34b428531f13c68ead13bb5bbed5445bb516ba5a47920" name="dracut-fips-aesni" arch="i686">
  <version epoch="0" ver="033" rel="502.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="f24469a199ba071e4e4fc796ebc7822044a9dedfcb2c62dab538b20a014b694d" name="dracut-fips-aesni" arch="x86_64">
  <version epoch="0" ver="033" rel="502.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="1529abb1465a76b1c4f5eac94647c0404c87001aba839c79356d51de57c2b044" name="dracut-network" arch="i686">
  <version epoch="0" ver="033" rel="502.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="de56599deaf5244cc264322bbb5b4183b3e650b8772baa9d60dd701471ed3fc7" name="dracut-network" arch="x86_64">
  <version epoch="0" ver="033" rel="502.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="c8190da6428ce34ee87e070d02587103e893194482f7227031caed05488a8086" name="dracut-tools" arch="i686">
  <version epoch="0" ver="033" rel="502.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="da6bc557ca6b0ff58f83801ae00af10b289842edc48f67fc5b23caa662d34585" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="033" rel="502.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="f899c4f47f8989619c2a64dec9451e8677044815c6a7b0c6a339bc3278984653" name="emacs" arch="i686">
  <version epoch="1" ver="24.3" rel="20.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:24.3-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1:24.3-12" date="1414065600">- Disable opmitization for arm architecture
  resolves: #1155952</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-13" date="1432209600">- Resolves: #1077836 emacs counts used memory incorrectly</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-14" date="1436961600">- texinfo not reading all of /usr/share/info content
- Resolves: #1192538</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490452)</changelog>
</package>
<package pkgid="6f64432efc4c9e83e265f66fc8a1652df2526c739758ce091b59cc3b35ee15c3" name="emacs" arch="src">
  <version epoch="1" ver="24.3" rel="20.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:24.3-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1:24.3-12" date="1414065600">- Disable opmitization for arm architecture
  resolves: #1155952</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-13" date="1432209600">- Resolves: #1077836 emacs counts used memory incorrectly</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-14" date="1436961600">- texinfo not reading all of /usr/share/info content
- Resolves: #1192538</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490452)</changelog>
</package>
<package pkgid="df424e4959a73c3df7f13982793c46540e0364e20f6fe8a549e2394343e5c8a1" name="emacs" arch="src">
  <version epoch="1" ver="24.3" rel="20.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:24.3-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1:24.3-12" date="1414065600">- Disable opmitization for arm architecture
  resolves: #1155952</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-13" date="1432209600">- Resolves: #1077836 emacs counts used memory incorrectly</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-14" date="1436961600">- texinfo not reading all of /usr/share/info content
- Resolves: #1192538</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490452)</changelog>
</package>
<package pkgid="fbe78c437444928e2ead10bf8ff3c1b56010d950cdb6db84340bb72110d56d52" name="emacs" arch="x86_64">
  <version epoch="1" ver="24.3" rel="20.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:24.3-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1:24.3-12" date="1414065600">- Disable opmitization for arm architecture
  resolves: #1155952</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-13" date="1432209600">- Resolves: #1077836 emacs counts used memory incorrectly</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-14" date="1436961600">- texinfo not reading all of /usr/share/info content
- Resolves: #1192538</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490452)</changelog>
</package>
<package pkgid="be2293cbf7fa974c0f692a1f99a3ca40a938a5b92b5ee0e01ab000f9dc8e5718" name="emacs-common" arch="i686">
  <version epoch="1" ver="24.3" rel="20.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:24.3-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1:24.3-12" date="1414065600">- Disable opmitization for arm architecture
  resolves: #1155952</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-13" date="1432209600">- Resolves: #1077836 emacs counts used memory incorrectly</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-14" date="1436961600">- texinfo not reading all of /usr/share/info content
- Resolves: #1192538</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490452)</changelog>
</package>
<package pkgid="7e970f7f8dcc93b49d396bc2cd8ec6a6052fbda761a30a65e7a186a12105e6ca" name="emacs-common" arch="x86_64">
  <version epoch="1" ver="24.3" rel="20.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:24.3-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1:24.3-12" date="1414065600">- Disable opmitization for arm architecture
  resolves: #1155952</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-13" date="1432209600">- Resolves: #1077836 emacs counts used memory incorrectly</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-14" date="1436961600">- texinfo not reading all of /usr/share/info content
- Resolves: #1192538</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490452)</changelog>
</package>
<package pkgid="c2f4d62b2aaeaedc8f0b231a15cadb3691cf6d84dd89f89813b234076afd804a" name="emacs-debuginfo" arch="i686">
  <version epoch="1" ver="24.3" rel="20.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:24.3-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1:24.3-12" date="1414065600">- Disable opmitization for arm architecture
  resolves: #1155952</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-13" date="1432209600">- Resolves: #1077836 emacs counts used memory incorrectly</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-14" date="1436961600">- texinfo not reading all of /usr/share/info content
- Resolves: #1192538</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490452)</changelog>
</package>
<package pkgid="fe28dbb1ee07cea2d3bd0576eab9ae7ceb09d14f4c3bc03f46be61347faedf75" name="emacs-debuginfo" arch="x86_64">
  <version epoch="1" ver="24.3" rel="20.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:24.3-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1:24.3-12" date="1414065600">- Disable opmitization for arm architecture
  resolves: #1155952</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-13" date="1432209600">- Resolves: #1077836 emacs counts used memory incorrectly</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-14" date="1436961600">- texinfo not reading all of /usr/share/info content
- Resolves: #1192538</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490452)</changelog>
</package>
<package pkgid="ac35d8a2dc34895d6cda2f752116b88a85fb54f094a623b7f4817b7357797b38" name="emacs-el" arch="noarch">
  <version epoch="1" ver="24.3" rel="20.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:24.3-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1:24.3-12" date="1414065600">- Disable opmitization for arm architecture
  resolves: #1155952</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-13" date="1432209600">- Resolves: #1077836 emacs counts used memory incorrectly</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-14" date="1436961600">- texinfo not reading all of /usr/share/info content
- Resolves: #1192538</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490452)</changelog>
</package>
<package pkgid="23de33598aa908434a7b00330102270694080cd5c87e9d8edcca8ae2b852a451" name="emacs-el" arch="noarch">
  <version epoch="1" ver="24.3" rel="20.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:24.3-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1:24.3-12" date="1414065600">- Disable opmitization for arm architecture
  resolves: #1155952</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-13" date="1432209600">- Resolves: #1077836 emacs counts used memory incorrectly</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-14" date="1436961600">- texinfo not reading all of /usr/share/info content
- Resolves: #1192538</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490452)</changelog>
</package>
<package pkgid="11e3c5711f66e9bf75c95c757a26e952ebcc591018b9fa9c03964345d09f641b" name="emacs-filesystem" arch="noarch">
  <version epoch="1" ver="24.3" rel="20.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:24.3-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1:24.3-12" date="1414065600">- Disable opmitization for arm architecture
  resolves: #1155952</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-13" date="1432209600">- Resolves: #1077836 emacs counts used memory incorrectly</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-14" date="1436961600">- texinfo not reading all of /usr/share/info content
- Resolves: #1192538</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490452)</changelog>
</package>
<package pkgid="2aa25704f251fc5ba28182d4b32ce1cea971cf565ab6095a7165b89d6b03cda0" name="emacs-filesystem" arch="noarch">
  <version epoch="1" ver="24.3" rel="20.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:24.3-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1:24.3-12" date="1414065600">- Disable opmitization for arm architecture
  resolves: #1155952</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-13" date="1432209600">- Resolves: #1077836 emacs counts used memory incorrectly</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-14" date="1436961600">- texinfo not reading all of /usr/share/info content
- Resolves: #1192538</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490452)</changelog>
</package>
<package pkgid="7cbf9a6ce4d1f0a94bd88816a91309c535463f2784d036cf9a49a1ce71f23749" name="emacs-git" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="57702fc25f82daf1141274596b3bfcd8f8af2929d7f0ceb1e1e1ad15fce37028" name="emacs-git" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="7ef4027bb29245f62c9b12d814cd720054daea76be27f6eda79896050752a291" name="emacs-git-el" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="44f7e1df19656dfd09e49cd006b2a0d3a3cc709747cdd76d58f1ad67e7f1475f" name="emacs-git-el" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="eff98d443a8fd9d189287a88116b2ad3329e00c3245803bd6d4f669c28923e94" name="emacs-mercurial" arch="i686">
  <version epoch="0" ver="2.6.2" rel="8.el7_4"/>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.5.2-2" date="1363608000">- Add hgweb.wsgi</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6-1" date="1368014400">- Update to 2.6</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6.2-1" date="1370520000">- Update to 2.6.2</changelog>
  <changelog author="Ondrej Oprala &lt;ooprala@redhat.com&gt; - 2.6.2-2" date="1380888000">- Use an absolute pathname in hg-ssh's shebang (#987029)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-5" date="1460635200">- Fix CVE-2016-3068 and CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-6" date="1460635201">- fix previous patch for CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-7" date="1497528000">- Fix CVE-2017-9462</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-8" date="1502798400">- Fix CVE-2017-1000115 and CVE-2017-1000116</changelog>
</package>
<package pkgid="6e0e17b6ef5bded760aa2438e7bd708e2f24005d36dbe06693bcff12f4db7648" name="emacs-mercurial" arch="x86_64">
  <version epoch="0" ver="2.6.2" rel="8.el7_4"/>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.5.2-2" date="1363608000">- Add hgweb.wsgi</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6-1" date="1368014400">- Update to 2.6</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6.2-1" date="1370520000">- Update to 2.6.2</changelog>
  <changelog author="Ondrej Oprala &lt;ooprala@redhat.com&gt; - 2.6.2-2" date="1380888000">- Use an absolute pathname in hg-ssh's shebang (#987029)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-5" date="1460635200">- Fix CVE-2016-3068 and CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-6" date="1460635201">- fix previous patch for CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-7" date="1497528000">- Fix CVE-2017-9462</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-8" date="1502798400">- Fix CVE-2017-1000115 and CVE-2017-1000116</changelog>
</package>
<package pkgid="57e6caa26867de26eee59026ca81e18076c8becdcadd415f33c4ec8e6718fd18" name="emacs-mercurial-el" arch="i686">
  <version epoch="0" ver="2.6.2" rel="8.el7_4"/>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.5.2-2" date="1363608000">- Add hgweb.wsgi</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6-1" date="1368014400">- Update to 2.6</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6.2-1" date="1370520000">- Update to 2.6.2</changelog>
  <changelog author="Ondrej Oprala &lt;ooprala@redhat.com&gt; - 2.6.2-2" date="1380888000">- Use an absolute pathname in hg-ssh's shebang (#987029)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-5" date="1460635200">- Fix CVE-2016-3068 and CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-6" date="1460635201">- fix previous patch for CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-7" date="1497528000">- Fix CVE-2017-9462</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-8" date="1502798400">- Fix CVE-2017-1000115 and CVE-2017-1000116</changelog>
</package>
<package pkgid="5356e0ab6e6cf2126a3dd7bbbf90d3d5c067617f1fa726227e096c15210764b1" name="emacs-mercurial-el" arch="x86_64">
  <version epoch="0" ver="2.6.2" rel="8.el7_4"/>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.5.2-2" date="1363608000">- Add hgweb.wsgi</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6-1" date="1368014400">- Update to 2.6</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6.2-1" date="1370520000">- Update to 2.6.2</changelog>
  <changelog author="Ondrej Oprala &lt;ooprala@redhat.com&gt; - 2.6.2-2" date="1380888000">- Use an absolute pathname in hg-ssh's shebang (#987029)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-5" date="1460635200">- Fix CVE-2016-3068 and CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-6" date="1460635201">- fix previous patch for CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-7" date="1497528000">- Fix CVE-2017-9462</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-8" date="1502798400">- Fix CVE-2017-1000115 and CVE-2017-1000116</changelog>
</package>
<package pkgid="88770db690ed64ecc21cceae38323affc7bbf1d9d5bdb57656d517ec54c0e3c8" name="emacs-nox" arch="i686">
  <version epoch="1" ver="24.3" rel="20.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:24.3-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1:24.3-12" date="1414065600">- Disable opmitization for arm architecture
  resolves: #1155952</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-13" date="1432209600">- Resolves: #1077836 emacs counts used memory incorrectly</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-14" date="1436961600">- texinfo not reading all of /usr/share/info content
- Resolves: #1192538</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490452)</changelog>
</package>
<package pkgid="8e826b3beecaef023bee69d398d535791098524095e57e7fe1623dadf64b78cf" name="emacs-nox" arch="x86_64">
  <version epoch="1" ver="24.3" rel="20.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:24.3-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1:24.3-12" date="1414065600">- Disable opmitization for arm architecture
  resolves: #1155952</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-13" date="1432209600">- Resolves: #1077836 emacs counts used memory incorrectly</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-14" date="1436961600">- texinfo not reading all of /usr/share/info content
- Resolves: #1192538</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490452)</changelog>
</package>
<package pkgid="eb98ede0760af91e56c63fcc5b0fa1980bb9abe88c726c88cdd7755e878a1633" name="emacs-terminal" arch="noarch">
  <version epoch="1" ver="24.3" rel="20.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:24.3-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1:24.3-12" date="1414065600">- Disable opmitization for arm architecture
  resolves: #1155952</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-13" date="1432209600">- Resolves: #1077836 emacs counts used memory incorrectly</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-14" date="1436961600">- texinfo not reading all of /usr/share/info content
- Resolves: #1192538</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490452)</changelog>
</package>
<package pkgid="80c2751180cc5e76e8334171bf821bdab88e4ba05008e74e192444aa21bcc149" name="emacs-terminal" arch="noarch">
  <version epoch="1" ver="24.3" rel="20.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:24.3-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1:24.3-12" date="1414065600">- Disable opmitization for arm architecture
  resolves: #1155952</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-13" date="1432209600">- Resolves: #1077836 emacs counts used memory incorrectly</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-14" date="1436961600">- texinfo not reading all of /usr/share/info content
- Resolves: #1192538</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490452)</changelog>
</package>
<package pkgid="e108601e54a67216c9e3ce1439d48f7a6addbcebe1e36719dc457f527d236dac" name="evince" arch="i686">
  <version epoch="0" ver="3.22.1" rel="5.2.el7_4"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.4-2" date="1471262400">- Check version of NPNVToolkit provided by browser
- Resolves: #1198229</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.92-1" date="1473854400">- Update to 3.21.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474459200">- Update to 3.22.0
- Don't set group tags
- Use make_install macro</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.1-1" date="1476273600">- Update to 3.22.1</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-2" date="1481284800">- Resolves: rhbz#1022649 don't complain about inability to copy metadata</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-3" date="1484049600">- Resolves: rhbz#1404656 crash on opening second evince window</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-4" date="1484049601">- Resolves: rhbz#1061177 add man pages for evince-previewer and evince-thumbnailer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5" date="1484568000">- Resolves: rhbz#1358249 restore ctrl page up/down shortcuts</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.22.1-5.1" date="1499428800">+ Fix arbitrary code execution via filename in tar-compressed
  comics archive
- Resolves: #1469528</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5.2" date="1500292800">- Related: #1469528 ensure .desktop file is still valid</changelog>
</package>
<package pkgid="99e6297d83978d7f710e73ef6b4de542da13a47de8c53d1dc4a63eeb76b4243e" name="evince" arch="src">
  <version epoch="0" ver="3.22.1" rel="5.2.el7_4"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.4-2" date="1471262400">- Check version of NPNVToolkit provided by browser
- Resolves: #1198229</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.92-1" date="1473854400">- Update to 3.21.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474459200">- Update to 3.22.0
- Don't set group tags
- Use make_install macro</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.1-1" date="1476273600">- Update to 3.22.1</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-2" date="1481284800">- Resolves: rhbz#1022649 don't complain about inability to copy metadata</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-3" date="1484049600">- Resolves: rhbz#1404656 crash on opening second evince window</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-4" date="1484049601">- Resolves: rhbz#1061177 add man pages for evince-previewer and evince-thumbnailer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5" date="1484568000">- Resolves: rhbz#1358249 restore ctrl page up/down shortcuts</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.22.1-5.1" date="1499428800">+ Fix arbitrary code execution via filename in tar-compressed
  comics archive
- Resolves: #1469528</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5.2" date="1500292800">- Related: #1469528 ensure .desktop file is still valid</changelog>
</package>
<package pkgid="7b66ffa4dd22dd6dcac213f42555aadb14a151ddbe5f49de220264019ddbcbda" name="evince" arch="src">
  <version epoch="0" ver="3.22.1" rel="5.2.el7_4"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.4-2" date="1471262400">- Check version of NPNVToolkit provided by browser
- Resolves: #1198229</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.92-1" date="1473854400">- Update to 3.21.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474459200">- Update to 3.22.0
- Don't set group tags
- Use make_install macro</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.1-1" date="1476273600">- Update to 3.22.1</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-2" date="1481284800">- Resolves: rhbz#1022649 don't complain about inability to copy metadata</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-3" date="1484049600">- Resolves: rhbz#1404656 crash on opening second evince window</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-4" date="1484049601">- Resolves: rhbz#1061177 add man pages for evince-previewer and evince-thumbnailer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5" date="1484568000">- Resolves: rhbz#1358249 restore ctrl page up/down shortcuts</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.22.1-5.1" date="1499428800">+ Fix arbitrary code execution via filename in tar-compressed
  comics archive
- Resolves: #1469528</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5.2" date="1500292800">- Related: #1469528 ensure .desktop file is still valid</changelog>
</package>
<package pkgid="eae9b86e5e469e8291c89cc4568d214cda1fc8292b7c38392cbf772818221c0d" name="evince" arch="x86_64">
  <version epoch="0" ver="3.22.1" rel="5.2.el7_4"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.4-2" date="1471262400">- Check version of NPNVToolkit provided by browser
- Resolves: #1198229</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.92-1" date="1473854400">- Update to 3.21.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474459200">- Update to 3.22.0
- Don't set group tags
- Use make_install macro</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.1-1" date="1476273600">- Update to 3.22.1</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-2" date="1481284800">- Resolves: rhbz#1022649 don't complain about inability to copy metadata</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-3" date="1484049600">- Resolves: rhbz#1404656 crash on opening second evince window</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-4" date="1484049601">- Resolves: rhbz#1061177 add man pages for evince-previewer and evince-thumbnailer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5" date="1484568000">- Resolves: rhbz#1358249 restore ctrl page up/down shortcuts</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.22.1-5.1" date="1499428800">+ Fix arbitrary code execution via filename in tar-compressed
  comics archive
- Resolves: #1469528</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5.2" date="1500292800">- Related: #1469528 ensure .desktop file is still valid</changelog>
</package>
<package pkgid="245d270f3b3453816e6d84e44e6ee5d86f7cfa16a36512b7993f328e0b25d985" name="evince-browser-plugin" arch="i686">
  <version epoch="0" ver="3.22.1" rel="5.2.el7_4"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.4-2" date="1471262400">- Check version of NPNVToolkit provided by browser
- Resolves: #1198229</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.92-1" date="1473854400">- Update to 3.21.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474459200">- Update to 3.22.0
- Don't set group tags
- Use make_install macro</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.1-1" date="1476273600">- Update to 3.22.1</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-2" date="1481284800">- Resolves: rhbz#1022649 don't complain about inability to copy metadata</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-3" date="1484049600">- Resolves: rhbz#1404656 crash on opening second evince window</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-4" date="1484049601">- Resolves: rhbz#1061177 add man pages for evince-previewer and evince-thumbnailer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5" date="1484568000">- Resolves: rhbz#1358249 restore ctrl page up/down shortcuts</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.22.1-5.1" date="1499428800">+ Fix arbitrary code execution via filename in tar-compressed
  comics archive
- Resolves: #1469528</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5.2" date="1500292800">- Related: #1469528 ensure .desktop file is still valid</changelog>
</package>
<package pkgid="8e5a683028f89b0e497847b06e1469e78e53c55d2ccd409d0b82d3710bbefb9e" name="evince-browser-plugin" arch="x86_64">
  <version epoch="0" ver="3.22.1" rel="5.2.el7_4"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.4-2" date="1471262400">- Check version of NPNVToolkit provided by browser
- Resolves: #1198229</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.92-1" date="1473854400">- Update to 3.21.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474459200">- Update to 3.22.0
- Don't set group tags
- Use make_install macro</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.1-1" date="1476273600">- Update to 3.22.1</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-2" date="1481284800">- Resolves: rhbz#1022649 don't complain about inability to copy metadata</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-3" date="1484049600">- Resolves: rhbz#1404656 crash on opening second evince window</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-4" date="1484049601">- Resolves: rhbz#1061177 add man pages for evince-previewer and evince-thumbnailer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5" date="1484568000">- Resolves: rhbz#1358249 restore ctrl page up/down shortcuts</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.22.1-5.1" date="1499428800">+ Fix arbitrary code execution via filename in tar-compressed
  comics archive
- Resolves: #1469528</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5.2" date="1500292800">- Related: #1469528 ensure .desktop file is still valid</changelog>
</package>
<package pkgid="8090aa835ec17a5281b5718f493205d2e942c1331400a1fe647d81516775df4c" name="evince-debuginfo" arch="i686">
  <version epoch="0" ver="3.22.1" rel="5.2.el7_4"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.4-2" date="1471262400">- Check version of NPNVToolkit provided by browser
- Resolves: #1198229</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.92-1" date="1473854400">- Update to 3.21.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474459200">- Update to 3.22.0
- Don't set group tags
- Use make_install macro</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.1-1" date="1476273600">- Update to 3.22.1</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-2" date="1481284800">- Resolves: rhbz#1022649 don't complain about inability to copy metadata</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-3" date="1484049600">- Resolves: rhbz#1404656 crash on opening second evince window</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-4" date="1484049601">- Resolves: rhbz#1061177 add man pages for evince-previewer and evince-thumbnailer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5" date="1484568000">- Resolves: rhbz#1358249 restore ctrl page up/down shortcuts</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.22.1-5.1" date="1499428800">+ Fix arbitrary code execution via filename in tar-compressed
  comics archive
- Resolves: #1469528</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5.2" date="1500292800">- Related: #1469528 ensure .desktop file is still valid</changelog>
</package>
<package pkgid="81959700acf72dcaefe76ee119c6e98836da0dca7a7dd90ec437c3defef16a18" name="evince-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.22.1" rel="5.2.el7_4"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.4-2" date="1471262400">- Check version of NPNVToolkit provided by browser
- Resolves: #1198229</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.92-1" date="1473854400">- Update to 3.21.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474459200">- Update to 3.22.0
- Don't set group tags
- Use make_install macro</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.1-1" date="1476273600">- Update to 3.22.1</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-2" date="1481284800">- Resolves: rhbz#1022649 don't complain about inability to copy metadata</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-3" date="1484049600">- Resolves: rhbz#1404656 crash on opening second evince window</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-4" date="1484049601">- Resolves: rhbz#1061177 add man pages for evince-previewer and evince-thumbnailer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5" date="1484568000">- Resolves: rhbz#1358249 restore ctrl page up/down shortcuts</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.22.1-5.1" date="1499428800">+ Fix arbitrary code execution via filename in tar-compressed
  comics archive
- Resolves: #1469528</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5.2" date="1500292800">- Related: #1469528 ensure .desktop file is still valid</changelog>
</package>
<package pkgid="88fc909dc5be10541b19bbc13b614b723bb0df04b7dabb76cb3c86630ba7657b" name="evince-devel" arch="i686">
  <version epoch="0" ver="3.22.1" rel="5.2.el7_4"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.4-2" date="1471262400">- Check version of NPNVToolkit provided by browser
- Resolves: #1198229</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.92-1" date="1473854400">- Update to 3.21.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474459200">- Update to 3.22.0
- Don't set group tags
- Use make_install macro</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.1-1" date="1476273600">- Update to 3.22.1</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-2" date="1481284800">- Resolves: rhbz#1022649 don't complain about inability to copy metadata</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-3" date="1484049600">- Resolves: rhbz#1404656 crash on opening second evince window</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-4" date="1484049601">- Resolves: rhbz#1061177 add man pages for evince-previewer and evince-thumbnailer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5" date="1484568000">- Resolves: rhbz#1358249 restore ctrl page up/down shortcuts</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.22.1-5.1" date="1499428800">+ Fix arbitrary code execution via filename in tar-compressed
  comics archive
- Resolves: #1469528</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5.2" date="1500292800">- Related: #1469528 ensure .desktop file is still valid</changelog>
</package>
<package pkgid="7b04bb055bcedf9300a3db910841da8f151429b9a7d4e5132af4cf33eec5cbf1" name="evince-devel" arch="x86_64">
  <version epoch="0" ver="3.22.1" rel="5.2.el7_4"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.4-2" date="1471262400">- Check version of NPNVToolkit provided by browser
- Resolves: #1198229</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.92-1" date="1473854400">- Update to 3.21.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474459200">- Update to 3.22.0
- Don't set group tags
- Use make_install macro</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.1-1" date="1476273600">- Update to 3.22.1</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-2" date="1481284800">- Resolves: rhbz#1022649 don't complain about inability to copy metadata</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-3" date="1484049600">- Resolves: rhbz#1404656 crash on opening second evince window</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-4" date="1484049601">- Resolves: rhbz#1061177 add man pages for evince-previewer and evince-thumbnailer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5" date="1484568000">- Resolves: rhbz#1358249 restore ctrl page up/down shortcuts</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.22.1-5.1" date="1499428800">+ Fix arbitrary code execution via filename in tar-compressed
  comics archive
- Resolves: #1469528</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5.2" date="1500292800">- Related: #1469528 ensure .desktop file is still valid</changelog>
</package>
<package pkgid="f81100f6cd7cc809ce4dd1660603939d7e9cb91a92fd1f3f961a20e78e91843e" name="evince-dvi" arch="i686">
  <version epoch="0" ver="3.22.1" rel="5.2.el7_4"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.4-2" date="1471262400">- Check version of NPNVToolkit provided by browser
- Resolves: #1198229</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.92-1" date="1473854400">- Update to 3.21.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474459200">- Update to 3.22.0
- Don't set group tags
- Use make_install macro</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.1-1" date="1476273600">- Update to 3.22.1</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-2" date="1481284800">- Resolves: rhbz#1022649 don't complain about inability to copy metadata</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-3" date="1484049600">- Resolves: rhbz#1404656 crash on opening second evince window</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-4" date="1484049601">- Resolves: rhbz#1061177 add man pages for evince-previewer and evince-thumbnailer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5" date="1484568000">- Resolves: rhbz#1358249 restore ctrl page up/down shortcuts</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.22.1-5.1" date="1499428800">+ Fix arbitrary code execution via filename in tar-compressed
  comics archive
- Resolves: #1469528</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5.2" date="1500292800">- Related: #1469528 ensure .desktop file is still valid</changelog>
</package>
<package pkgid="45204ece306c6fbd809190608e751e885a082bb06e1700917fc8529b5ad99947" name="evince-dvi" arch="x86_64">
  <version epoch="0" ver="3.22.1" rel="5.2.el7_4"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.4-2" date="1471262400">- Check version of NPNVToolkit provided by browser
- Resolves: #1198229</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.92-1" date="1473854400">- Update to 3.21.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474459200">- Update to 3.22.0
- Don't set group tags
- Use make_install macro</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.1-1" date="1476273600">- Update to 3.22.1</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-2" date="1481284800">- Resolves: rhbz#1022649 don't complain about inability to copy metadata</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-3" date="1484049600">- Resolves: rhbz#1404656 crash on opening second evince window</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-4" date="1484049601">- Resolves: rhbz#1061177 add man pages for evince-previewer and evince-thumbnailer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5" date="1484568000">- Resolves: rhbz#1358249 restore ctrl page up/down shortcuts</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.22.1-5.1" date="1499428800">+ Fix arbitrary code execution via filename in tar-compressed
  comics archive
- Resolves: #1469528</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5.2" date="1500292800">- Related: #1469528 ensure .desktop file is still valid</changelog>
</package>
<package pkgid="6cfa74b1c5cf91cca08e9bc8b803fc6443cff1d41881cd5bb9163119cbeb0d40" name="evince-libs" arch="i686">
  <version epoch="0" ver="3.22.1" rel="5.2.el7_4"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.4-2" date="1471262400">- Check version of NPNVToolkit provided by browser
- Resolves: #1198229</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.92-1" date="1473854400">- Update to 3.21.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474459200">- Update to 3.22.0
- Don't set group tags
- Use make_install macro</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.1-1" date="1476273600">- Update to 3.22.1</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-2" date="1481284800">- Resolves: rhbz#1022649 don't complain about inability to copy metadata</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-3" date="1484049600">- Resolves: rhbz#1404656 crash on opening second evince window</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-4" date="1484049601">- Resolves: rhbz#1061177 add man pages for evince-previewer and evince-thumbnailer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5" date="1484568000">- Resolves: rhbz#1358249 restore ctrl page up/down shortcuts</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.22.1-5.1" date="1499428800">+ Fix arbitrary code execution via filename in tar-compressed
  comics archive
- Resolves: #1469528</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5.2" date="1500292800">- Related: #1469528 ensure .desktop file is still valid</changelog>
</package>
<package pkgid="c84d5f405be066e0fd33db8b3837cc3412404c74a4bb92178b508c8f0a214d3c" name="evince-libs" arch="x86_64">
  <version epoch="0" ver="3.22.1" rel="5.2.el7_4"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.4-2" date="1471262400">- Check version of NPNVToolkit provided by browser
- Resolves: #1198229</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.92-1" date="1473854400">- Update to 3.21.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474459200">- Update to 3.22.0
- Don't set group tags
- Use make_install macro</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.1-1" date="1476273600">- Update to 3.22.1</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-2" date="1481284800">- Resolves: rhbz#1022649 don't complain about inability to copy metadata</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-3" date="1484049600">- Resolves: rhbz#1404656 crash on opening second evince window</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-4" date="1484049601">- Resolves: rhbz#1061177 add man pages for evince-previewer and evince-thumbnailer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5" date="1484568000">- Resolves: rhbz#1358249 restore ctrl page up/down shortcuts</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.22.1-5.1" date="1499428800">+ Fix arbitrary code execution via filename in tar-compressed
  comics archive
- Resolves: #1469528</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5.2" date="1500292800">- Related: #1469528 ensure .desktop file is still valid</changelog>
</package>
<package pkgid="5cae10b08d1ac750f25a64bdcdb23aa4826212ff8400f43bd49b7100b34a616a" name="evince-nautilus" arch="i686">
  <version epoch="0" ver="3.22.1" rel="5.2.el7_4"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.4-2" date="1471262400">- Check version of NPNVToolkit provided by browser
- Resolves: #1198229</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.92-1" date="1473854400">- Update to 3.21.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474459200">- Update to 3.22.0
- Don't set group tags
- Use make_install macro</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.1-1" date="1476273600">- Update to 3.22.1</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-2" date="1481284800">- Resolves: rhbz#1022649 don't complain about inability to copy metadata</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-3" date="1484049600">- Resolves: rhbz#1404656 crash on opening second evince window</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-4" date="1484049601">- Resolves: rhbz#1061177 add man pages for evince-previewer and evince-thumbnailer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5" date="1484568000">- Resolves: rhbz#1358249 restore ctrl page up/down shortcuts</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.22.1-5.1" date="1499428800">+ Fix arbitrary code execution via filename in tar-compressed
  comics archive
- Resolves: #1469528</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5.2" date="1500292800">- Related: #1469528 ensure .desktop file is still valid</changelog>
</package>
<package pkgid="907701f1b33a1cc7203641536c4dfcb5bc842946b8bc311533d73d5904b72251" name="evince-nautilus" arch="x86_64">
  <version epoch="0" ver="3.22.1" rel="5.2.el7_4"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.4-2" date="1471262400">- Check version of NPNVToolkit provided by browser
- Resolves: #1198229</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.21.92-1" date="1473854400">- Update to 3.21.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474459200">- Update to 3.22.0
- Don't set group tags
- Use make_install macro</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.1-1" date="1476273600">- Update to 3.22.1</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-2" date="1481284800">- Resolves: rhbz#1022649 don't complain about inability to copy metadata</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-3" date="1484049600">- Resolves: rhbz#1404656 crash on opening second evince window</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-4" date="1484049601">- Resolves: rhbz#1061177 add man pages for evince-previewer and evince-thumbnailer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5" date="1484568000">- Resolves: rhbz#1358249 restore ctrl page up/down shortcuts</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.22.1-5.1" date="1499428800">+ Fix arbitrary code execution via filename in tar-compressed
  comics archive
- Resolves: #1469528</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 3.22.1-5.2" date="1500292800">- Related: #1469528 ensure .desktop file is still valid</changelog>
</package>
<package pkgid="b4145dabd793c402b72eea32228de2e313ca9cb74e2412798938af6a35fdac94" name="fence-agents" arch="src">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="67eb38fe4e352bc4eae3b87c764c9c4c1583174a16568c6a0f7563fab57ccf0b" name="fence-agents" arch="src">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="4ef24b32a2973a82fa83aee86406bcbdb0206e8e84887843e76d2358acc59c9d" name="fence-agents" arch="src">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="0916b6bd6e4ac89f9f6f730b39ff90659cd0d174c2fa53729a5b65dd32dc41f4" name="fence-agents" arch="src">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="71afc35a598e1949ffc58b32dd43938b531f32c30fb84c33022d4d2adabb089a" name="fence-agents" arch="src">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="9f1a329d2f6e4147e27a0f8701f8d7b42bf269ee42e21e7d27b0fccdf7c0178d" name="fence-agents" arch="src">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="4064b92d0ac0825842c7317696fb0dae7b49e6d59836363443172880bf533148" name="fence-agents-all" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="2c626d9911c5a06331cbf3256a8f051982ad35c7e790358ffc225dd63e09f3ac" name="fence-agents-all" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="c1363492e3bea779c7c1a4c070bbc0bc595735c6bbbafb754cfb5b6759651941" name="fence-agents-all" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="eb48a5152ec9a98a587afd167def1ced994169647162d1c89168db4a672b9800" name="fence-agents-all" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="a6b7af9b5e601728779e4b7fa37828ef819af021f5f3468291fafa03e349ecda" name="fence-agents-all" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="d25bcc073b51f0ea7bdf439307749c4c79d920981a2a8b06fe965c3abdee098c" name="fence-agents-all" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="fabdcc44c81d9f35c3dad2474ba97c3b7f3de117cfa160be52f566893692ce37" name="fence-agents-apc" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="2a6f45bd9c6e8232f96c49d72fac1d25c121464b38b10a8cfcc4c09e544466ad" name="fence-agents-apc" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="77ee3f11361471bc7ab37510f025ce733a3f0d55d68cda1ca6a36f0d1f38f152" name="fence-agents-apc" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="68d232110cb2d6e710b39ebdcf0fe0cb1285e635da3b76783200418c75878244" name="fence-agents-apc" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="1ffe43038f391608aec70cbe51e5893fee279e9501fd938ccb2156642439e590" name="fence-agents-apc" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="28b87e8bdbd4905c30273a7a9743c6986a971c4d0c71e716979e88089efd179b" name="fence-agents-apc" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="c231b5c108e927b990933b4ce5cfbd93246ca83fba81cb44f4cb655464647c75" name="fence-agents-apc-snmp" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="51d5d967e05bbd91c949eabf69d37737c83068193cd0a5b121d84c8d11935278" name="fence-agents-apc-snmp" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="ff66c0675c2ae8206b583fae2022eb70ca06902f9873707cc6509a8d8d030e39" name="fence-agents-apc-snmp" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="25a4c49799f4e971fb61457cd18257600b3f6d3cf45eaca9329c7fe9b0b247e5" name="fence-agents-apc-snmp" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="09b45151ac0993c78dde69df2909e2b6bf56a0ab582d83965d6558b5b3415153" name="fence-agents-apc-snmp" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="c9b2e3dd2e23869674b5b418b710297761e7eb273521f07cab4e370aade8a8ef" name="fence-agents-apc-snmp" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="b67d88b81ad62f68aec8d8951007358c61dc2a846ba857d60b81aa46a20e89bf" name="fence-agents-bladecenter" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="2eb31a4423b3374ca5c5178c2773f69928cbee9e04b52e39bf7d4a42c432b7bd" name="fence-agents-bladecenter" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="56c89d4c1edce1ac3b14cf349471c05c73be6700bad4891daa28af8896f38289" name="fence-agents-bladecenter" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="f15473dcd2dc56f8c40da359b9089bb2d9834ad90f47664a500362e679066582" name="fence-agents-bladecenter" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="5661f52983540fb02815225de9bf00afd9b2872eb4041e8e372e7faed9aef834" name="fence-agents-bladecenter" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="aa9049160526687c692136210804b34fd6b4eaacc704359106121ee47054a3fe" name="fence-agents-bladecenter" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="593f752e94a20789e1814a101027dd8959f15c6c7ed6a95e68947483a656e5f3" name="fence-agents-brocade" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="762b7d98b8d9d431d82e545fffca8be02cb56ebcbb39e2f8374c365cc661ce83" name="fence-agents-brocade" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="282b661e88502cf6658b4706b4c3169c41054830e4545d57ba36d48c53dd6329" name="fence-agents-brocade" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="74c3aa0b7fa9c8787736c01c866578b07e12d9a57340306aa5493e835665ab26" name="fence-agents-brocade" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="c3065b03f5b524dcf9065b025371a165eaac5283e5a472b88fc9e13a042d312b" name="fence-agents-brocade" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="5a2b77520acc2d1e7a610164613459b0e2cc9b933c43ecfd6056de0d4223ec12" name="fence-agents-brocade" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="4f492e6baed0dc81ad26364ccc2639e2604d048e969e86244ed64f34438e815b" name="fence-agents-cisco-mds" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="9388613456ffb276e5b618715497b0f4652dd13494694bb18268bc557053c738" name="fence-agents-cisco-mds" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="3605d832bb92de08249d8e189ae9437d50b04bd19d4426a4b9c29b308f029aae" name="fence-agents-cisco-mds" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="1e94d6e43aec746651c06b76e7647f50f07d8a28f19ea12d61a425b39a9e7ea0" name="fence-agents-cisco-mds" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="cafae67bd9e8dd1e0b4efc08566e6ae050557e33917cef3fea6ab0746f80b783" name="fence-agents-cisco-mds" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="80a1206e5951aee203940996fe0fd3cf577cca5fcdce8a3d451555482cea0345" name="fence-agents-cisco-mds" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="2d075e629e9e72ff4db6681ae89ba266debb57a920423cd8b46cfd458d80cb04" name="fence-agents-cisco-ucs" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="9ea0c7c382fe615a59d035f0a8a580f9be560f3f6bf8382765c0c883a3c86117" name="fence-agents-cisco-ucs" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="e98d7330dedabe00c56fc0c42ca7acca6d466c6c43494117b87cc5ec54987b97" name="fence-agents-cisco-ucs" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="f14087634a4f855ce87b4e24a4148534983ce991e8f50d3a15496a3787e5ee3f" name="fence-agents-cisco-ucs" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="95747761836d208d402cdccc02206c569f42e9f1b504dd999a777c2d008f493c" name="fence-agents-cisco-ucs" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="c2fea960b8d05d3dbc25580d93b2836fd23f4ed5d57282fb6d4728094b2e2489" name="fence-agents-cisco-ucs" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="c20da553af6d6664dd8b94bccccf15d0bcad26b21d384bed20d7b885f99c7aaa" name="fence-agents-common" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="05bd18ca6d813c965b5ee76f0c43a00ab185195e6e65b8dbc7f0ae8b961da683" name="fence-agents-common" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="45f9706b20659b7c7de7f9e3ef754ae0fe872eeb84b63a6572013e4aa1956dfb" name="fence-agents-common" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="4f381e8d17eb6c09fc28a493891337221b3b44f9b2a4a8c568ca2ab583b6b283" name="fence-agents-common" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="331d75ee12ea8206d2ed4a4a2b6e3527fa15a0d2fe1728bc43513118e85b86ac" name="fence-agents-common" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="10b39be5f1717a9207f1d1bf6b6cc055d0b2f998fc76edc65b046902c3169baf" name="fence-agents-common" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="4ee5252e5606fd947f3fcd62edc83463eeea1bb0e308de5f187889b221929cf0" name="fence-agents-compute" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="feaca2e68a0cd2f0138f0f2fdf33452bbb62ada3a6f20682d4c025a34e09b647" name="fence-agents-compute" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="9e05d31a3baf1165d5800542877cbf67d624bbb83850cf4ee419786354297e6e" name="fence-agents-compute" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="eb570c0966c7926cac2c7f050675039f4771ca5c505bd4fbffeff86b568976f9" name="fence-agents-compute" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="67f66927d70cd2ba0e8c141a33ecf5163cef0ac536bef5f156a1bcbca04035e0" name="fence-agents-compute" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="f34d24ee4ff2d5e40e93a57db331ca888587c64b8f57da7f72dd035083de92f4" name="fence-agents-compute" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="dde3d14da565af9dabe0967d7d9bbd1ab88cbf94fde7160ef2feb60d05ecffa7" name="fence-agents-debuginfo" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="b1d34030505ba52e97f038cdf2671ee7ba1bd124dc6e91d61329c1a2aede253d" name="fence-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="8a75427d2a095ee91902f4a3b68a76c130307cf1194da6a8bccbf38b1df25a31" name="fence-agents-debuginfo" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="190174da4c08cd40042258a37fa918c1425284bdad7f378811f1125c492de371" name="fence-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="442bf7e73a7a17f843cae5275d602b6cef1113af00c0ab289af0a38b577b70d3" name="fence-agents-debuginfo" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="a7a7556c7207848ee39126434851c86d4d0d571e6c2d921d7f61a42f61aa14fe" name="fence-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="a6216bf3377a323d3dedecfb88beea7e622d7a1da09561eb844a626f1a364883" name="fence-agents-drac5" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="b2d6b199c9f57090cb6dbd8cc44db31d787593f7a7969b5f3ae26d2ce720b3f7" name="fence-agents-drac5" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="d1cf172590d17a3a46e046ee24d25476d1f78ff3287f62238d8a296bd65994e8" name="fence-agents-drac5" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="5f9d4329273955f6f62fccf1f620b4b0ca5dc3a87c551f3ed8f53059d56926d0" name="fence-agents-drac5" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="53ce0f535a5258c43b3e94f5d8f4e84a45d7384420db9b5bc5862cc623680368" name="fence-agents-drac5" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="c5dbce279af0d2216d99697345b8a0b1cfdd7abd998fa0cb2bdc7965ae7f6fa2" name="fence-agents-drac5" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="7a44376cd7a47a4b46b9753d574a28348f07471a2cfd54f8f65be431d24f6ff9" name="fence-agents-eaton-snmp" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="761e9682f89318b4e6b6859e69e7044ec3df1d7bad37ccdeb6aef2db872983f6" name="fence-agents-eaton-snmp" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="dabae25e18cd59a656aa8ad724ccd4bafabfc3bf718cb33663562bc5cc3368d6" name="fence-agents-eaton-snmp" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="12393319e863dbaf654df2ac27f8d63ed2a601a31b37b7794e9b92bb7873c64e" name="fence-agents-eaton-snmp" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="0e0cd2ca76243fe98750450eb57bef8d7fbe86db83be71e1fab9cf2a475eb9f0" name="fence-agents-eaton-snmp" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="6fc9e2caa48d6e164a12bdc709b7eb90a32cc1316655a960b3f0b2d9943ff29a" name="fence-agents-eaton-snmp" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="26671da123c392267e93636ba3734c9c53dd889c588c7e49cde476820a2776e9" name="fence-agents-emerson" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="0b93de2d2fc8f33b1f0cd70236289c3292611a9489936f718165c6c1906ff396" name="fence-agents-emerson" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="8504a96615dea5fe71458f255f22caeac21d43b34f111e35e9677957111cb6f6" name="fence-agents-emerson" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="f21a2c4b4d13581c705a5fe28a6131bd485b88998390349c103ca9746519c403" name="fence-agents-emerson" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="3f6d51c07fc04feb95084066779eb55d8863b9e34444eb470f5027bc153717a1" name="fence-agents-emerson" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="65989533d5b29649ef752ae8b382f4917c7993ef3b54c5bd517ab853205606e8" name="fence-agents-emerson" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="6d544ccadafb00bedfbe8f70c9b9991d93295afbdb103087d64719e412e3e3ec" name="fence-agents-eps" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="ba1aea6cffaa61a65edf833bdb0e0b736362e47f1ac6f15ada8821538952cbad" name="fence-agents-eps" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="bc5edf5d40a2ed131dff24e4ea2a5fc2dc3b1533a9111961db76dbc030f676ba" name="fence-agents-eps" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="cc66b2cb61491983ba40772a65c6adf00ba232d61e52cd884557f8c77ad8ca4e" name="fence-agents-eps" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="9f8f47561fb33d8a660c0cf2a30e9c03ded7ebd5138a5068a36e541a354115f7" name="fence-agents-eps" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="fdeeebbfa5ed029a3180e3bc91b737a4ca1e37a913776937782a6375f2198bcb" name="fence-agents-eps" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="08a5c411c26df78c2abf5742692827bb6cf35171910be96f930879325dc7de24" name="fence-agents-hpblade" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="97b76ed53f3231979f8d80e11620d5431702bbdb5df18583d1ee32962611e6ff" name="fence-agents-hpblade" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="ba65c0eca0b8c30e7673ad8f4f809516f8a9e2bba15341f92353d9e8516d9e3e" name="fence-agents-hpblade" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="1b6bfcbd1ec1ad177d8835b68f54d7522d2c64c74d7e6c67d5fcbe5e89053c95" name="fence-agents-hpblade" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="e660da8c6f112e6434a2d84a91f9861454857fb3e4924668ea3eb71128a59b4f" name="fence-agents-hpblade" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="1125bf1a9abcfc15c53d083ab00a60ea670155b59b98f07b38500c6d9fc2e957" name="fence-agents-hpblade" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="58514c9880a4b212076cb0c085fa481cf131712b87f507ce98d37cbdcb5b0b01" name="fence-agents-ibmblade" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="d53ef1a799171998e0da300dcebf60f097ba2fa5496bc3ceaa856c3283f98e1a" name="fence-agents-ibmblade" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="02428051f7e1e4885cec80550055509762aa8f289d7c729e6932e591fbc3e55b" name="fence-agents-ibmblade" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="7cb2e4474a8702e3c2d459b7c0f71c420b7ce5732a013470018c11e2f4a28003" name="fence-agents-ibmblade" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="33647e935992061ca094834b26ecd5e5d7f66b7c9c2eeb46f0f637390a6deede" name="fence-agents-ibmblade" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="3e777a64b4b24402edded8a39a3ec6def1c8d70aab0b72f5e3692f9aa644ac9a" name="fence-agents-ibmblade" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="701bcc2a35f39d25cbbc76474eb5caf1cb8faf3587e42a98a10e178859da9968" name="fence-agents-ifmib" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="a8519803856a714d9706b1ec37565fab53e546431ddf6883ad806fb35376135e" name="fence-agents-ifmib" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="7dbb74b11b9a6c549313f27036f3a021ecfa6aba4ccabab44252bb5f8800b40c" name="fence-agents-ifmib" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="862d86df65ca36442d819a93543afb9b9c018d12880a74efc76a85873aa05462" name="fence-agents-ifmib" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="f0917057de5ad5bbd14a71e8ab0c44793504ba4f61dbce4164ad2b30e4d69a5f" name="fence-agents-ifmib" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="38c62d20b3208f3772ddd42f92903c410d21f5f07bdf8b0656912ef54e455c60" name="fence-agents-ifmib" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="ff73a24e404627047ac5ce41d88cd5c32b5845b0d3a355cc02a0ae97f2d44c0f" name="fence-agents-ilo-moonshot" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="17a791398658efe52aaf47c19652ad3d6eaabed39fdf7eb58936e5a0d6e4681b" name="fence-agents-ilo-moonshot" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="4af782548a868898d4417565c6a8f87350e00420bb80ca0889e067e231a22c96" name="fence-agents-ilo-moonshot" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="236709fc494f2d84e55b776fcda34ae8a5785ad2bd5ba6e1fe66359e0da137d9" name="fence-agents-ilo-moonshot" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="55e865a4a777f5161baf187ca368cdf8d1a7b14ff1a6e8bd993270e5ebf7dc6c" name="fence-agents-ilo-moonshot" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="6782cb82667beb97143006535fd68cfc5d1da5d4fdd8258778467ba628073434" name="fence-agents-ilo-moonshot" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="117c5b20c62ef77c8539430e6f27398ee5f14f263e988eea11a9f70be27f10b1" name="fence-agents-ilo-mp" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="66dc4562182ae302526c1c6e563a762c84f5b4a6b644027071e4a4f11cdbc4bc" name="fence-agents-ilo-mp" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="606d43d8069bd9d4120a33e08f22ab6586377f85cfed975b3157dd3274b84135" name="fence-agents-ilo-mp" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="985219e16d606e957cf80991d6e34947210aeb154779214a21ab06eba4bb2e82" name="fence-agents-ilo-mp" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="e278618f015a6b9a044ba4bb2da84648928a8e856e0ec7b51edd3008f8d23afc" name="fence-agents-ilo-mp" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="d82b3c1d027592d9aa1b06ab285f083859980380fcc1a78e733a54b0f5d30785" name="fence-agents-ilo-mp" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="374959423fa142d477bc5e82d5633648019449b1a888d6470276cb8fb10a7ec3" name="fence-agents-ilo-ssh" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="70cd033f332222a2d47690d21a6a18cc7c12a448561c21415af3fad150367c26" name="fence-agents-ilo-ssh" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="82d993a8073cb2a5dff0c2f671b376979dc10e7a45e22ecbc0012699f1455e4e" name="fence-agents-ilo-ssh" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="c9890099f1d610a15c7b18a4797390d4871cefdcd977a7bcef21a946dd699118" name="fence-agents-ilo-ssh" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="b586a601210a479f83fb3a8ce9f11747c8a59d2e508daca0f793c5cadb9a88eb" name="fence-agents-ilo-ssh" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="05f92280aff2d21376e2ded793edd9a8b4631290ac56971a04adc6ad85675b0d" name="fence-agents-ilo-ssh" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="e2e9b59e29687411d662246c7b42639366ec56cbfb7b5072a06ab62ca1bce850" name="fence-agents-ilo2" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="4d8432420a1da016f43c7698e6524d1a4f3948602d4e09907a3ef0c1e13271d1" name="fence-agents-ilo2" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="23c955dd8c20a96b7027a34480ec38a2df66d7de4298e7891239d48776855d99" name="fence-agents-ilo2" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="de938fe5986b059394ed7cedbb90eda67d46db0a406dc88a51d106cafbcaabe0" name="fence-agents-ilo2" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="0a9b696b7f8343f8285b081a0b4cbca97edac361b7856b7918d00ee8e6b3467b" name="fence-agents-ilo2" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="cfdc49dc342870e213ff51d26624700bf78f3edf0422acab6f234016879476ff" name="fence-agents-ilo2" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="ccc6c64bc2842a8636c67a92d95e2094bdd2bd2dfa3fa2b81358f2dde5f33bac" name="fence-agents-intelmodular" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="fba26cf9a711577ae6484c0a1aae30ec0a6facaad6603aa9cda3975a0db99783" name="fence-agents-intelmodular" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="d753acb96f544645c77db78ea42963cbfc4e4375373cdbe8a3693115d2eb94aa" name="fence-agents-intelmodular" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="cea04e8b9cb743c37a437f1341618237f31e8061109d0859139b7b431cfef692" name="fence-agents-intelmodular" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="a2c6e9be5aac38e36ceebc0d071d076a609925f93c719976ff7c1ee15c5c35e7" name="fence-agents-intelmodular" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="3246c3f5581e4915846fa46c4e4b03f79dccc0bfb6db8f3162bc4081dfded704" name="fence-agents-intelmodular" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="490f810f31e4c0a0727f041b42d51979b6cb1ffddf75d4d1295d36e1d9464850" name="fence-agents-ipdu" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="61d203ac896b830e63a7173569fecc4b1be67be6af24167775ef31404996cd2c" name="fence-agents-ipdu" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="e1a41b7fb80bc5f9609fa125ef98a1f57cd64636972a7f788e153fb7ea171baf" name="fence-agents-ipdu" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="adb1ff27e378fa30e98efdf2ab8ba1ffe13daf8f3af12294efeeafb450075eb0" name="fence-agents-ipdu" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="651361bbf79e442b8884fedd63bdccc45b174d9e19ddb4de4baaa2b7e776f6aa" name="fence-agents-ipdu" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="a1e662e91d2797cfe095fc636d06c579093f26e26125f42111b2fdaf86b683ca" name="fence-agents-ipdu" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="8b7db26ca1a84966383b5450be42278f103dc4f925303ad6810a68d23e5becdb" name="fence-agents-ipmilan" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="acf23375350d267fb4a88a285cbc6e718d22bcdfb0b051806a191a2e1e36a69d" name="fence-agents-ipmilan" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="248677c4d5b9f890926c6430073daf25958adf077fd112ec8faad476e2fced54" name="fence-agents-ipmilan" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="9cd4deb5357e7e27f05480f6c225d8c9cb34111e6e40e4b35f8dc366cea782bd" name="fence-agents-ipmilan" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="6c41d8ae649a1a403c0306a5bdf658c4f8451a75751f1c381f4eab9feb93afe3" name="fence-agents-ipmilan" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="faa74c936a03740be48e1715d89c0abf7419bfadce6e6cb62ac147a796882dc8" name="fence-agents-ipmilan" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="db3ebc9f4ecf6f279a205b7197db9014bba810c5943a1106bc88ea4f9a335e0a" name="fence-agents-kdump" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="ae58e73306334e3b5a84a69552daf2160ebf3209565fc2cd2123e5a769fd63fe" name="fence-agents-kdump" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="befa3f76960c58a1a6309ab3bb67b7dca16ed1331a0232a1a6e6407f57e1d3c3" name="fence-agents-kdump" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="11d95051a2dc8516458aee803df9273d8fa7a8a68a74ad80c7baf23d0d3b5267" name="fence-agents-kdump" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="ed16071206bdd1b11e6f0a0d0fd4ffb8588887771f3efe517b78ff6470db1c2c" name="fence-agents-kdump" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="65fda434bdd843a8aac068e3192772ce44860eaeb289bdbdaf25ea40023d1405" name="fence-agents-kdump" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="d46104a1c768a321b825cacfc38179d05a7aaec960ea62e9be889328de2ad608" name="fence-agents-mpath" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="3522a88507aceb11e42b2509cbe7f0ea9be0e725a38c89a1e124bc202f47c760" name="fence-agents-mpath" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="1ab6cd2207f98186307af42894d0a5c8d99f395b28dc2c9a9370e1bb9c763081" name="fence-agents-mpath" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="990360eb175b14ad10e418c2b94b8d406b74648606e51cf468e24752becae1a7" name="fence-agents-mpath" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="c5d08551131e5b1c9635cd92378bda00a954ec5de6d916dd7f1674434275cab1" name="fence-agents-mpath" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="fe62827662e270028892176f937875b51f3b1da67fa058e4098fe354bb52a603" name="fence-agents-mpath" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="19071dce7b1a8e14b2752052c4c4bb32f0be896a53563e486fe75398de1e4eec" name="fence-agents-rhevm" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="5471bfb999a7b0420ce523e5ad572d6fe675b0fd5add5dc727b7f8cc3d11ed15" name="fence-agents-rhevm" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="7aa87b1521f6553f254fb69e021623e6a425dc9cb4e63fe327fd5ffce13fe9b3" name="fence-agents-rhevm" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="d2c9d9aa23ef162e1f83ed8a04bdee0969d692493c6c186f69b38ca5c737635f" name="fence-agents-rhevm" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="ffd7ae155320ecf0f711f4288de9a32f8e6371d7adf2472837c99454ee993ce5" name="fence-agents-rhevm" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="79caad70ce44873953c99f9a900a9544cf59360a3e22f110f4f6a04c4e4bfda2" name="fence-agents-rhevm" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="dc27278e62343153a24b1980194c807aade244c37f3e4de49e7be76ae2139db0" name="fence-agents-rsa" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="2a0e78677cce85b9be233e3c1d844266e76a9a222ef3f5ab40b3cd3c2b010076" name="fence-agents-rsa" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="7abc9ec1af2666bf6372dc8feb95a1c4df13b20e5a1babee4c5318b2a68c5357" name="fence-agents-rsa" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="849170bb1289ea8dc47ef77a9a0af75bbe406d24a6f3b6166bd80ae4da4031c7" name="fence-agents-rsa" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="e01b290de55907420304b09c465410238ff1aa3bc00e83ad1f75efd3c277ca94" name="fence-agents-rsa" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="36e7b8cca2f162c13ef55751262b8a565102e6f738565c5917a906405d83e739" name="fence-agents-rsa" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="8449dfd04e3fa4dbdbccc81938a545b70485d95682fcdc88eecba1b3fbd78d49" name="fence-agents-rsb" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="87845b98066427e72feef239b33227e7ee3d7683c0730fa216463d32e0c6e7cb" name="fence-agents-rsb" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="a4849c6b672cd2418363b3294b72a7448a9f8862fad881c11ddf7f7220a940be" name="fence-agents-rsb" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="fbe0b4c6cedf01e2befa96413728f98837dd2b4064b5aec5934bbd3823337371" name="fence-agents-rsb" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="a44c9c54145d527d3beb44852ab4a5bd331e6a648bedc61a82d4a144eb9d880c" name="fence-agents-rsb" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="bf0156f1afe024d7321131990a6c84ca2d23704a6a05a40dfbe4e79d26ff555b" name="fence-agents-rsb" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="53afc086486403176903221cf88abe54ff0f26039865784c3c20a2335793335c" name="fence-agents-sbd" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="18c0a50d8a1b9fc851c9ffd0d3b717f4f59090977410ca241f0607ba89715df5" name="fence-agents-sbd" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="98b70b86e7575b834bbf7c1f8e8d77b3e875f6ba39440b0c43fd0f255b2fc563" name="fence-agents-sbd" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="ed1d5f937f9c9c1a188bc330cccef6786c75e69632b8f8cea8b4545ee3f59866" name="fence-agents-sbd" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="5a94e64a3f278d6b008f0788384b3a1faf226ab61142df1bdbf94e1ecec23b30" name="fence-agents-sbd" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="53baa7e9ecb5d502c6b2226046eee085b929015cc0ad2dad9c19778cc1755ac1" name="fence-agents-sbd" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="396ae87a7b612942743e8a6a1c6686000b180756bcbec4b7dcd48e03daa46d07" name="fence-agents-scsi" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="21187a866de21f07adc6bc6f60edf1cec778d3ba66d3a42a4d2279d113dd7d28" name="fence-agents-scsi" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="30788116f5d0a352dc25f79c0b3bc899d50d875e4d60a8ff42ee1dd8f3e97807" name="fence-agents-scsi" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="5c0019f2ec1eb218e76284bcb77fb2aa9be5b0acd24c5069b39c17adc6d41c1e" name="fence-agents-scsi" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="8f079d67b1e3cce0cd63d9c23956197e3f70e074e52061b81d55dc13c740824a" name="fence-agents-scsi" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="2591479b2dcfdb3ecf0896e08eb293d8b4dde6b182a49fb34344fe35c5aff552" name="fence-agents-scsi" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="712b90141e1c8f9dc60066a87c61b3a17c5ade9c96a3b5d75912bb2ff8eb1d28" name="fence-agents-virsh" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="caa1d37d5fad4c82a070aaec4ac59e61f326865efc7b2324bf7165860d4d326d" name="fence-agents-virsh" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="a776bc461a681fbc88d3ad8c98896d962b543b23659c16d876ea76d5d80ae36a" name="fence-agents-virsh" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="5fe2d3a2226c879efba7167724ae910c92fa13cdca6e0c2095897b479846c8d3" name="fence-agents-virsh" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="61e790b0bd47c4287f24386e397499f1d99326768abdd490a95e1d6aca695dfe" name="fence-agents-virsh" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="6a84bc0ec439374f7100fcc659ce4b4f7a8b87dad8c09f75f4115a9763f7ef84" name="fence-agents-virsh" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="1ff3217b83d2e87150c814980b242efd81ddb20958b66bc520ecc089b0e0fda3" name="fence-agents-vmware-soap" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="2f9a1db7486f37b58d6f30ff2d6abdb5f711f20f31abd305cbfbd96268b789b8" name="fence-agents-vmware-soap" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="aa3abcb82502fe3765676d1ef460f7f5bd4ae8ba5124e7f42a69b46d029822d1" name="fence-agents-vmware-soap" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="4d604657d48c68eeb14a32262ead6f1229257db16915afbfb74ecc4b8cdfa8a2" name="fence-agents-vmware-soap" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="3210fcf4dfcc53c6b5416a22462d3e182054971a385ed64958a9743e6a13cdb9" name="fence-agents-vmware-soap" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="60895488ed6d17faaf32c6528aa4b947bdfb4a82594cc06ddb610ad87ac47c00" name="fence-agents-vmware-soap" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="0609ba59e2c36636ce255f77451e001b89b7dca6a275e5f96aec7a82490c155c" name="fence-agents-wti" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="5b9e8ccc92729b2b94ed50cd098ed8023520abd98bee2d722f0f488ebbed7ca4" name="fence-agents-wti" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="0221689b58db07746b264ff1189dcf34632dac78e10172254530878ec20aa55d" name="fence-agents-wti" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="c10158a1ee54c553759a42e212a55d9d1a655a08fa6fdae3f207f8e6ef040b58" name="fence-agents-wti" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="4faa2a708a010daad01c59f9a6e1e440adb97d78d02a9275c554121d498cdb82" name="fence-agents-wti" arch="i686">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="f35fa06ad5fe895e76682faa54266fba167c4c0b044ea7b41c648e8a68cfaba7" name="fence-agents-wti" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="070cdbe9369554c9b6554e8bcd57eed21c8f97db8a2324b130660d35dc2962b6" name="firefox" arch="i686">
  <version epoch="0" ver="52.3.0" rel="2.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-2" date="1488369600">- Enable system nss</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-3" date="1488456000">- Added fix for rhbz#1423012 - ppc64 gfx crashes</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-2" date="1501761600">- Update to 52.3.0 ESR (b2)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.3.0-2" date="1503489600">- Manual Debranding after Auto Debranding failed.</changelog>
</package>
<package pkgid="6cdaa1de0287436dbddbe8d95f426d769d41ab62e4e33b679c8a836bc2bdae66" name="firefox" arch="src">
  <version epoch="0" ver="52.3.0" rel="2.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-2" date="1488369600">- Enable system nss</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-3" date="1488456000">- Added fix for rhbz#1423012 - ppc64 gfx crashes</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-2" date="1501761600">- Update to 52.3.0 ESR (b2)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.3.0-2" date="1503489600">- Manual Debranding after Auto Debranding failed.</changelog>
</package>
<package pkgid="4a75e2468e61917f945c7ef6a11fa0acc5a501457d2a93cb9175315f7e54d795" name="firefox" arch="src">
  <version epoch="0" ver="52.3.0" rel="2.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-2" date="1488369600">- Enable system nss</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-3" date="1488456000">- Added fix for rhbz#1423012 - ppc64 gfx crashes</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-2" date="1501761600">- Update to 52.3.0 ESR (b2)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.3.0-2" date="1503489600">- Manual Debranding after Auto Debranding failed.</changelog>
</package>
<package pkgid="80b0038df72439bd73d3ec0d186bc848a7bae0ae7b3474c30539b309944fde81" name="firefox" arch="x86_64">
  <version epoch="0" ver="52.3.0" rel="2.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-2" date="1488369600">- Enable system nss</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-3" date="1488456000">- Added fix for rhbz#1423012 - ppc64 gfx crashes</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-2" date="1501761600">- Update to 52.3.0 ESR (b2)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.3.0-2" date="1503489600">- Manual Debranding after Auto Debranding failed.</changelog>
</package>
<package pkgid="6f9b172e2f4a646fd9042cff936558eb3f2a7d32eb36bd85156709c8b265d4e3" name="firefox" arch="i686">
  <version epoch="0" ver="52.4.0" rel="1.el7.centos"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-3" date="1488456000">- Added fix for rhbz#1423012 - ppc64 gfx crashes</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.4.0-1" date="1506686400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="f210bc68794aee76eb8580913556abd0a126a8db0bd91250b40ab607943be222" name="firefox" arch="src">
  <version epoch="0" ver="52.4.0" rel="1.el7.centos"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-3" date="1488456000">- Added fix for rhbz#1423012 - ppc64 gfx crashes</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.4.0-1" date="1506686400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="467c3314c2cb0e7b6b5465b291c9a8f9cd8eea00e81a6de50a7bb09b80e5a95c" name="firefox" arch="src">
  <version epoch="0" ver="52.4.0" rel="1.el7.centos"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-3" date="1488456000">- Added fix for rhbz#1423012 - ppc64 gfx crashes</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.4.0-1" date="1506686400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="b859e582b221b5f309198708932f6f0fbcdaf8efa3ef6fb8ec79060fa85a5da6" name="firefox" arch="x86_64">
  <version epoch="0" ver="52.4.0" rel="1.el7.centos"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-3" date="1488456000">- Added fix for rhbz#1423012 - ppc64 gfx crashes</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.4.0-1" date="1506686400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="277fc7aff13fc4b4f88583a5bc7a8066783d08a4012215cbc292f1cddcf75a58" name="firefox" arch="i686">
  <version epoch="0" ver="52.5.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.5.0-1" date="1510920000">- Manual Debranding</changelog>
</package>
<package pkgid="5ca9001e2193f758b7da017ab7f71f874a07d254b3285656a8b6397eeb15802e" name="firefox" arch="src">
  <version epoch="0" ver="52.5.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.5.0-1" date="1510920000">- Manual Debranding</changelog>
</package>
<package pkgid="5a47f8c1138e2597215b037c0141bf544188b660ca3acdae0300b8be4b9bf0ab" name="firefox" arch="src">
  <version epoch="0" ver="52.5.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.5.0-1" date="1510920000">- Manual Debranding</changelog>
</package>
<package pkgid="4042843f05e7173c1fda1a6e516fe9998d15b059923778e6135d79119fb8f765" name="firefox" arch="x86_64">
  <version epoch="0" ver="52.5.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.5.0-1" date="1510920000">- Manual Debranding</changelog>
</package>
<package pkgid="e003595b9aa132082384da609f3419fc1dce6c54fad0af17282fcca68ad7c4b1" name="firefox" arch="i686">
  <version epoch="0" ver="52.5.1" rel="1.el7.centos"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.5.1-1" date="1512475200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="b7b9cca72646a9232a4ff46cae52abf5f2b2c3e394e6c5fc000abbabe7292ceb" name="firefox" arch="src">
  <version epoch="0" ver="52.5.1" rel="1.el7.centos"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.5.1-1" date="1512475200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="beeba52bb772236e9965573bf9915077001c1da31cedb663f5c4b7dca141d217" name="firefox" arch="src">
  <version epoch="0" ver="52.5.1" rel="1.el7.centos"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.5.1-1" date="1512475200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="59288a6dbbd050854a3687f6c2f0d5b650ea416e61d08493bc736c7fdb34a8a9" name="firefox" arch="x86_64">
  <version epoch="0" ver="52.5.1" rel="1.el7.centos"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.5.1-1" date="1512475200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="a995c01355504b02464a43dd611da644306431bf0b9dea82bf6f7f768581cdb8" name="firefox" arch="i686">
  <version epoch="0" ver="52.6.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-1" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - - 52.6.1-1" date="1516795200">Manual CentOS Debranding</changelog>
</package>
<package pkgid="2462da7971cc84632196183ee0187edb0f4380a3758580dbabde5e821bcd9c50" name="firefox" arch="src">
  <version epoch="0" ver="52.6.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-1" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - - 52.6.1-1" date="1516795200">Manual CentOS Debranding</changelog>
</package>
<package pkgid="e68dc947433d6cd6e39e810163b9846171859fd0a7a46938ad880040399f8a4f" name="firefox" arch="src">
  <version epoch="0" ver="52.6.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-1" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - - 52.6.1-1" date="1516795200">Manual CentOS Debranding</changelog>
</package>
<package pkgid="89981f45a2ba52d89c85a5c0bd7a820a7d6dbec0810ee017405c27d92873afa7" name="firefox" arch="x86_64">
  <version epoch="0" ver="52.6.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-1" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - - 52.6.1-1" date="1516795200">Manual CentOS Debranding</changelog>
</package>
<package pkgid="479cc8984f7256878574baafa592c7a9f49a736733182482ff7906527ed148e5" name="firefox" arch="i686">
  <version epoch="0" ver="52.7.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.7.0-1" date="1521115200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="f05a4438bed66c57aa5ab1adddf3a6c8576abb15be5d624e70cebc53a89ac2f7" name="firefox" arch="src">
  <version epoch="0" ver="52.7.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.7.0-1" date="1521115200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="c25881d9dbb473fccac3eb0846f66e2d23d24994fa010d21d21f98483a386b23" name="firefox" arch="src">
  <version epoch="0" ver="52.7.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.7.0-1" date="1521115200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="3849a6803f7e446e7446e1f5c583b3152c50206ebfc1d15b6d6debec06236f26" name="firefox" arch="x86_64">
  <version epoch="0" ver="52.7.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.7.0-1" date="1521115200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="85296a5cb34003fd9f78c5fe7fa108e8e06a0a037e529cc2329e213e2cf48925" name="firefox" arch="i686">
  <version epoch="0" ver="52.7.2" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627200">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.2-1" date="1521201600">- Update to 52.7.2 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.7.2-1" date="1521460800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="22b8a606943dc0bedf02086a404dc9f3c3567e353a3d6c1cbd674d36c61bb4cb" name="firefox" arch="src">
  <version epoch="0" ver="52.7.2" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627200">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.2-1" date="1521201600">- Update to 52.7.2 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.7.2-1" date="1521460800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="7b87b301c5c17833c21034295dab5993b862808ff2afeee325556e70e52761fa" name="firefox" arch="src">
  <version epoch="0" ver="52.7.2" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627200">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.2-1" date="1521201600">- Update to 52.7.2 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.7.2-1" date="1521460800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="8c9b902bb6c9df92d14a7764d3a505680aaf835abb5bc84d8f256131caf856ab" name="firefox" arch="x86_64">
  <version epoch="0" ver="52.7.2" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627200">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.2-1" date="1521201600">- Update to 52.7.2 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.7.2-1" date="1521460800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="c65dcd45afcecfdbb8de9e1cbcf7fc60b513338d73b6fd476e89fbf3407b35b7" name="firefox-debuginfo" arch="i686">
  <version epoch="0" ver="52.3.0" rel="2.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-2" date="1488369600">- Enable system nss</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-3" date="1488456000">- Added fix for rhbz#1423012 - ppc64 gfx crashes</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-2" date="1501761600">- Update to 52.3.0 ESR (b2)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.3.0-2" date="1503489600">- Manual Debranding after Auto Debranding failed.</changelog>
</package>
<package pkgid="0f78a724085753d56e77b807b16f78e9048dfb12f0837796bd9c176cf7fab9a0" name="firefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="52.3.0" rel="2.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-2" date="1488369600">- Enable system nss</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-3" date="1488456000">- Added fix for rhbz#1423012 - ppc64 gfx crashes</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-2" date="1501761600">- Update to 52.3.0 ESR (b2)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.3.0-2" date="1503489600">- Manual Debranding after Auto Debranding failed.</changelog>
</package>
<package pkgid="df303b0a4875cbdebe73eb3e471c3ff038df8cecb8741d289fd4caef5131e70f" name="firefox-debuginfo" arch="i686">
  <version epoch="0" ver="52.4.0" rel="1.el7.centos"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-3" date="1488456000">- Added fix for rhbz#1423012 - ppc64 gfx crashes</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.4.0-1" date="1506686400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="47943d24040d07bb0b9347e8a20b1b36d9dbb7927c80896d92a0d931cd189c86" name="firefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="52.4.0" rel="1.el7.centos"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-3" date="1488456000">- Added fix for rhbz#1423012 - ppc64 gfx crashes</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.4.0-1" date="1506686400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="2f1a2a11fa31b486a434eef720523f2a676296eda04c006f21c906011908818d" name="firefox-debuginfo" arch="i686">
  <version epoch="0" ver="52.5.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.5.0-1" date="1510920000">- Manual Debranding</changelog>
</package>
<package pkgid="9e763cd0b3158ba5f92f57ac1c50a1bfed8da8675794e1bb34aac30ec48f7663" name="firefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="52.5.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.5.0-1" date="1510920000">- Manual Debranding</changelog>
</package>
<package pkgid="a1d4aef81980c0f93b1f078d3d55608b3014a3c6d0380e03efc32c8ac465c1fa" name="firefox-debuginfo" arch="i686">
  <version epoch="0" ver="52.5.1" rel="1.el7.centos"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.5.1-1" date="1512475200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="ca2cb6ca007d95f105e725a95d3a8e1940c496b6d39b97752788aebed428a48c" name="firefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="52.5.1" rel="1.el7.centos"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.5.1-1" date="1512475200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="50042c0eedb46986e8c910f804c49da7e99e9cacda45037fb27a3bd6c8ac0946" name="firefox-debuginfo" arch="i686">
  <version epoch="0" ver="52.6.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-1" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - - 52.6.1-1" date="1516795200">Manual CentOS Debranding</changelog>
</package>
<package pkgid="92151259b726f1694d74c8b4e09c01e07825af343e71f63c3134a23bb0f64984" name="firefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="52.6.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-1" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - - 52.6.1-1" date="1516795200">Manual CentOS Debranding</changelog>
</package>
<package pkgid="1a83bec9b91128778d90970a2962293e69616ffbec497d9a186658df169293d0" name="firefox-debuginfo" arch="i686">
  <version epoch="0" ver="52.7.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.7.0-1" date="1521115200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="539598ad44396931774120bb0380246fe52df20656555b323e41595da69ef97a" name="firefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="52.7.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.7.0-1" date="1521115200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="9ef5a9b15b3a901ee969dcc9abee33f111df83dca5c8cc3d7d8f588c1570801a" name="firefox-debuginfo" arch="i686">
  <version epoch="0" ver="52.7.2" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627200">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.2-1" date="1521201600">- Update to 52.7.2 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.7.2-1" date="1521460800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="6227b2470831dd81d5bb8590fac2815a58c595ee9e1b17ad35f9290be832fff8" name="firefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="52.7.2" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627200">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.2-1" date="1521201600">- Update to 52.7.2 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.7.2-1" date="1521460800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="c1f785bc17de7a7fb4be923e96a03cc70f7d81a18f3f0e585cc0d763ffbc4584" name="flatpak" arch="i686">
  <version epoch="0" ver="0.8.7" rel="3.el7_4"/>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-2" date="1487332800">- Added pkgconfig(e2p) build dependency
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-3" date="1487332801">- ExcludeArch 32bit ppc which doesn't have libseccomp
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.3-4" date="1487764800">- Remove ExcludeArch ppc now that we have libseccomp there
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.4-1" date="1489147200">- Update to 0.8.4
- Resolves: #1391018</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.4-2" date="1489147201">- Sync bzip2 dependency with Fedora package
- Make the libs subpackage depend on the base package for libostree
- Fix multilib issues with XML-based documentation</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.5-1" date="1491220800">- Update to 0.8.5
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.5-2" date="1491307200">- Add libostree use-after-free patch
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.7-1" date="1497960000">- Update to 0.8.7
- Resolves: #1391018</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.8.7-2" date="1501588800">- Fix libostree bundling:
  Ensure we do not Provide or Require libostree.
  Move the shared library into flatpak-libs so flatpak always
  depends on it.
  Keep the shared library filename as libostree, but put it
  under a private directory.  Renaming the file on disk did not
  really do much since the dynamic linker and RPM work from the
  soname.
  Resolves: #1476905
- Tweak build to work both with and without BZ#1392354</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.7-3" date="1510315200">- Fix crasher in xdg-desktop-portal
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
</package>
<package pkgid="b87fe0b57669f722269e77a8c95ba3ce96f0798d2124a1fc0b8fa655b16d51f6" name="flatpak" arch="src">
  <version epoch="0" ver="0.8.7" rel="3.el7_4"/>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-2" date="1487332800">- Added pkgconfig(e2p) build dependency
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-3" date="1487332801">- ExcludeArch 32bit ppc which doesn't have libseccomp
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.3-4" date="1487764800">- Remove ExcludeArch ppc now that we have libseccomp there
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.4-1" date="1489147200">- Update to 0.8.4
- Resolves: #1391018</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.4-2" date="1489147201">- Sync bzip2 dependency with Fedora package
- Make the libs subpackage depend on the base package for libostree
- Fix multilib issues with XML-based documentation</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.5-1" date="1491220800">- Update to 0.8.5
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.5-2" date="1491307200">- Add libostree use-after-free patch
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.7-1" date="1497960000">- Update to 0.8.7
- Resolves: #1391018</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.8.7-2" date="1501588800">- Fix libostree bundling:
  Ensure we do not Provide or Require libostree.
  Move the shared library into flatpak-libs so flatpak always
  depends on it.
  Keep the shared library filename as libostree, but put it
  under a private directory.  Renaming the file on disk did not
  really do much since the dynamic linker and RPM work from the
  soname.
  Resolves: #1476905
- Tweak build to work both with and without BZ#1392354</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.7-3" date="1510315200">- Fix crasher in xdg-desktop-portal
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
</package>
<package pkgid="e0a57c41d253ffab09932883d5f97195656814b579a5c712f248a546885f77d4" name="flatpak" arch="src">
  <version epoch="0" ver="0.8.7" rel="3.el7_4"/>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-2" date="1487332800">- Added pkgconfig(e2p) build dependency
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-3" date="1487332801">- ExcludeArch 32bit ppc which doesn't have libseccomp
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.3-4" date="1487764800">- Remove ExcludeArch ppc now that we have libseccomp there
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.4-1" date="1489147200">- Update to 0.8.4
- Resolves: #1391018</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.4-2" date="1489147201">- Sync bzip2 dependency with Fedora package
- Make the libs subpackage depend on the base package for libostree
- Fix multilib issues with XML-based documentation</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.5-1" date="1491220800">- Update to 0.8.5
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.5-2" date="1491307200">- Add libostree use-after-free patch
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.7-1" date="1497960000">- Update to 0.8.7
- Resolves: #1391018</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.8.7-2" date="1501588800">- Fix libostree bundling:
  Ensure we do not Provide or Require libostree.
  Move the shared library into flatpak-libs so flatpak always
  depends on it.
  Keep the shared library filename as libostree, but put it
  under a private directory.  Renaming the file on disk did not
  really do much since the dynamic linker and RPM work from the
  soname.
  Resolves: #1476905
- Tweak build to work both with and without BZ#1392354</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.7-3" date="1510315200">- Fix crasher in xdg-desktop-portal
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
</package>
<package pkgid="cf3fc880274f9c301d1dded737f729305fa49f49a01d5cf4c7b7d877760cf02d" name="flatpak" arch="x86_64">
  <version epoch="0" ver="0.8.7" rel="3.el7_4"/>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-2" date="1487332800">- Added pkgconfig(e2p) build dependency
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-3" date="1487332801">- ExcludeArch 32bit ppc which doesn't have libseccomp
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.3-4" date="1487764800">- Remove ExcludeArch ppc now that we have libseccomp there
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.4-1" date="1489147200">- Update to 0.8.4
- Resolves: #1391018</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.4-2" date="1489147201">- Sync bzip2 dependency with Fedora package
- Make the libs subpackage depend on the base package for libostree
- Fix multilib issues with XML-based documentation</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.5-1" date="1491220800">- Update to 0.8.5
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.5-2" date="1491307200">- Add libostree use-after-free patch
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.7-1" date="1497960000">- Update to 0.8.7
- Resolves: #1391018</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.8.7-2" date="1501588800">- Fix libostree bundling:
  Ensure we do not Provide or Require libostree.
  Move the shared library into flatpak-libs so flatpak always
  depends on it.
  Keep the shared library filename as libostree, but put it
  under a private directory.  Renaming the file on disk did not
  really do much since the dynamic linker and RPM work from the
  soname.
  Resolves: #1476905
- Tweak build to work both with and without BZ#1392354</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.7-3" date="1510315200">- Fix crasher in xdg-desktop-portal
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
</package>
<package pkgid="14f018f04cded6c015337fc269116c3e8638d92734603f0a2fab700c3f00b41c" name="flatpak-builder" arch="i686">
  <version epoch="0" ver="0.8.7" rel="3.el7_4"/>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-2" date="1487332800">- Added pkgconfig(e2p) build dependency
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-3" date="1487332801">- ExcludeArch 32bit ppc which doesn't have libseccomp
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.3-4" date="1487764800">- Remove ExcludeArch ppc now that we have libseccomp there
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.4-1" date="1489147200">- Update to 0.8.4
- Resolves: #1391018</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.4-2" date="1489147201">- Sync bzip2 dependency with Fedora package
- Make the libs subpackage depend on the base package for libostree
- Fix multilib issues with XML-based documentation</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.5-1" date="1491220800">- Update to 0.8.5
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.5-2" date="1491307200">- Add libostree use-after-free patch
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.7-1" date="1497960000">- Update to 0.8.7
- Resolves: #1391018</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.8.7-2" date="1501588800">- Fix libostree bundling:
  Ensure we do not Provide or Require libostree.
  Move the shared library into flatpak-libs so flatpak always
  depends on it.
  Keep the shared library filename as libostree, but put it
  under a private directory.  Renaming the file on disk did not
  really do much since the dynamic linker and RPM work from the
  soname.
  Resolves: #1476905
- Tweak build to work both with and without BZ#1392354</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.7-3" date="1510315200">- Fix crasher in xdg-desktop-portal
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
</package>
<package pkgid="55e7ecf64d993547b0ee926a067056dc3fea0c99b6d1985bc0c758c8745f3bde" name="flatpak-builder" arch="x86_64">
  <version epoch="0" ver="0.8.7" rel="3.el7_4"/>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-2" date="1487332800">- Added pkgconfig(e2p) build dependency
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-3" date="1487332801">- ExcludeArch 32bit ppc which doesn't have libseccomp
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.3-4" date="1487764800">- Remove ExcludeArch ppc now that we have libseccomp there
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.4-1" date="1489147200">- Update to 0.8.4
- Resolves: #1391018</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.4-2" date="1489147201">- Sync bzip2 dependency with Fedora package
- Make the libs subpackage depend on the base package for libostree
- Fix multilib issues with XML-based documentation</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.5-1" date="1491220800">- Update to 0.8.5
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.5-2" date="1491307200">- Add libostree use-after-free patch
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.7-1" date="1497960000">- Update to 0.8.7
- Resolves: #1391018</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.8.7-2" date="1501588800">- Fix libostree bundling:
  Ensure we do not Provide or Require libostree.
  Move the shared library into flatpak-libs so flatpak always
  depends on it.
  Keep the shared library filename as libostree, but put it
  under a private directory.  Renaming the file on disk did not
  really do much since the dynamic linker and RPM work from the
  soname.
  Resolves: #1476905
- Tweak build to work both with and without BZ#1392354</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.7-3" date="1510315200">- Fix crasher in xdg-desktop-portal
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
</package>
<package pkgid="0c7f45f790d3115334302882e3aee3c90f76dd15414407f0cdb49524c8e76300" name="flatpak-debuginfo" arch="i686">
  <version epoch="0" ver="0.8.7" rel="3.el7_4"/>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-2" date="1487332800">- Added pkgconfig(e2p) build dependency
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-3" date="1487332801">- ExcludeArch 32bit ppc which doesn't have libseccomp
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.3-4" date="1487764800">- Remove ExcludeArch ppc now that we have libseccomp there
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.4-1" date="1489147200">- Update to 0.8.4
- Resolves: #1391018</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.4-2" date="1489147201">- Sync bzip2 dependency with Fedora package
- Make the libs subpackage depend on the base package for libostree
- Fix multilib issues with XML-based documentation</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.5-1" date="1491220800">- Update to 0.8.5
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.5-2" date="1491307200">- Add libostree use-after-free patch
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.7-1" date="1497960000">- Update to 0.8.7
- Resolves: #1391018</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.8.7-2" date="1501588800">- Fix libostree bundling:
  Ensure we do not Provide or Require libostree.
  Move the shared library into flatpak-libs so flatpak always
  depends on it.
  Keep the shared library filename as libostree, but put it
  under a private directory.  Renaming the file on disk did not
  really do much since the dynamic linker and RPM work from the
  soname.
  Resolves: #1476905
- Tweak build to work both with and without BZ#1392354</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.7-3" date="1510315200">- Fix crasher in xdg-desktop-portal
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
</package>
<package pkgid="d750d02edf09605783e3646061a11fddb9d0d1375be1e475a261a1d585b1a927" name="flatpak-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8.7" rel="3.el7_4"/>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-2" date="1487332800">- Added pkgconfig(e2p) build dependency
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-3" date="1487332801">- ExcludeArch 32bit ppc which doesn't have libseccomp
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.3-4" date="1487764800">- Remove ExcludeArch ppc now that we have libseccomp there
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.4-1" date="1489147200">- Update to 0.8.4
- Resolves: #1391018</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.4-2" date="1489147201">- Sync bzip2 dependency with Fedora package
- Make the libs subpackage depend on the base package for libostree
- Fix multilib issues with XML-based documentation</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.5-1" date="1491220800">- Update to 0.8.5
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.5-2" date="1491307200">- Add libostree use-after-free patch
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.7-1" date="1497960000">- Update to 0.8.7
- Resolves: #1391018</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.8.7-2" date="1501588800">- Fix libostree bundling:
  Ensure we do not Provide or Require libostree.
  Move the shared library into flatpak-libs so flatpak always
  depends on it.
  Keep the shared library filename as libostree, but put it
  under a private directory.  Renaming the file on disk did not
  really do much since the dynamic linker and RPM work from the
  soname.
  Resolves: #1476905
- Tweak build to work both with and without BZ#1392354</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.7-3" date="1510315200">- Fix crasher in xdg-desktop-portal
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
</package>
<package pkgid="a66050cb20df2380be5d3d23b046884adb32d86a1c46669cdf6fc18ee12a6d7c" name="flatpak-devel" arch="i686">
  <version epoch="0" ver="0.8.7" rel="3.el7_4"/>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-2" date="1487332800">- Added pkgconfig(e2p) build dependency
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-3" date="1487332801">- ExcludeArch 32bit ppc which doesn't have libseccomp
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.3-4" date="1487764800">- Remove ExcludeArch ppc now that we have libseccomp there
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.4-1" date="1489147200">- Update to 0.8.4
- Resolves: #1391018</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.4-2" date="1489147201">- Sync bzip2 dependency with Fedora package
- Make the libs subpackage depend on the base package for libostree
- Fix multilib issues with XML-based documentation</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.5-1" date="1491220800">- Update to 0.8.5
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.5-2" date="1491307200">- Add libostree use-after-free patch
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.7-1" date="1497960000">- Update to 0.8.7
- Resolves: #1391018</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.8.7-2" date="1501588800">- Fix libostree bundling:
  Ensure we do not Provide or Require libostree.
  Move the shared library into flatpak-libs so flatpak always
  depends on it.
  Keep the shared library filename as libostree, but put it
  under a private directory.  Renaming the file on disk did not
  really do much since the dynamic linker and RPM work from the
  soname.
  Resolves: #1476905
- Tweak build to work both with and without BZ#1392354</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.7-3" date="1510315200">- Fix crasher in xdg-desktop-portal
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
</package>
<package pkgid="a698c2b4a530de6adc6e1270c842be45883368aff011acd7a18f246bfd3cd520" name="flatpak-devel" arch="x86_64">
  <version epoch="0" ver="0.8.7" rel="3.el7_4"/>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-2" date="1487332800">- Added pkgconfig(e2p) build dependency
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-3" date="1487332801">- ExcludeArch 32bit ppc which doesn't have libseccomp
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.3-4" date="1487764800">- Remove ExcludeArch ppc now that we have libseccomp there
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.4-1" date="1489147200">- Update to 0.8.4
- Resolves: #1391018</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.4-2" date="1489147201">- Sync bzip2 dependency with Fedora package
- Make the libs subpackage depend on the base package for libostree
- Fix multilib issues with XML-based documentation</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.5-1" date="1491220800">- Update to 0.8.5
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.5-2" date="1491307200">- Add libostree use-after-free patch
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.7-1" date="1497960000">- Update to 0.8.7
- Resolves: #1391018</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.8.7-2" date="1501588800">- Fix libostree bundling:
  Ensure we do not Provide or Require libostree.
  Move the shared library into flatpak-libs so flatpak always
  depends on it.
  Keep the shared library filename as libostree, but put it
  under a private directory.  Renaming the file on disk did not
  really do much since the dynamic linker and RPM work from the
  soname.
  Resolves: #1476905
- Tweak build to work both with and without BZ#1392354</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.7-3" date="1510315200">- Fix crasher in xdg-desktop-portal
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
</package>
<package pkgid="39071e05f41de2b698c25c912459da3613b50777c2a51a45c74d3075d2aae502" name="flatpak-libs" arch="i686">
  <version epoch="0" ver="0.8.7" rel="3.el7_4"/>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-2" date="1487332800">- Added pkgconfig(e2p) build dependency
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-3" date="1487332801">- ExcludeArch 32bit ppc which doesn't have libseccomp
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.3-4" date="1487764800">- Remove ExcludeArch ppc now that we have libseccomp there
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.4-1" date="1489147200">- Update to 0.8.4
- Resolves: #1391018</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.4-2" date="1489147201">- Sync bzip2 dependency with Fedora package
- Make the libs subpackage depend on the base package for libostree
- Fix multilib issues with XML-based documentation</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.5-1" date="1491220800">- Update to 0.8.5
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.5-2" date="1491307200">- Add libostree use-after-free patch
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.7-1" date="1497960000">- Update to 0.8.7
- Resolves: #1391018</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.8.7-2" date="1501588800">- Fix libostree bundling:
  Ensure we do not Provide or Require libostree.
  Move the shared library into flatpak-libs so flatpak always
  depends on it.
  Keep the shared library filename as libostree, but put it
  under a private directory.  Renaming the file on disk did not
  really do much since the dynamic linker and RPM work from the
  soname.
  Resolves: #1476905
- Tweak build to work both with and without BZ#1392354</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.7-3" date="1510315200">- Fix crasher in xdg-desktop-portal
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
</package>
<package pkgid="76ee9838dbcc6d0c6973a476d6bfecf59fd8f8dcef41ed7d6c0eb4d33b339a7d" name="flatpak-libs" arch="x86_64">
  <version epoch="0" ver="0.8.7" rel="3.el7_4"/>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-2" date="1487332800">- Added pkgconfig(e2p) build dependency
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-3" date="1487332801">- ExcludeArch 32bit ppc which doesn't have libseccomp
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.3-4" date="1487764800">- Remove ExcludeArch ppc now that we have libseccomp there
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.4-1" date="1489147200">- Update to 0.8.4
- Resolves: #1391018</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.4-2" date="1489147201">- Sync bzip2 dependency with Fedora package
- Make the libs subpackage depend on the base package for libostree
- Fix multilib issues with XML-based documentation</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.5-1" date="1491220800">- Update to 0.8.5
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.5-2" date="1491307200">- Add libostree use-after-free patch
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.7-1" date="1497960000">- Update to 0.8.7
- Resolves: #1391018</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.8.7-2" date="1501588800">- Fix libostree bundling:
  Ensure we do not Provide or Require libostree.
  Move the shared library into flatpak-libs so flatpak always
  depends on it.
  Keep the shared library filename as libostree, but put it
  under a private directory.  Renaming the file on disk did not
  really do much since the dynamic linker and RPM work from the
  soname.
  Resolves: #1476905
- Tweak build to work both with and without BZ#1392354</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.7-3" date="1510315200">- Fix crasher in xdg-desktop-portal
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
</package>
<package pkgid="be627bfcd792d212290f753dfe1c19bea5728848d6a4e324cca64a7415002560" name="freeradius" arch="i686">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="7be66dd2c5869b0e2ac436209be5f86f9fbfcebd1eec08e1a301f1e13cc0f957" name="freeradius" arch="src">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="c2ddb760ede336eb8954a7e8de54c1368c1e2d32555665b7a90e3aac26f9d2b5" name="freeradius" arch="src">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="ff72d1ee8e0d46b469242c5b8fd2b217ed924dcaa03aa8fbf31abbd2f0e23644" name="freeradius" arch="x86_64">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="6e710423b7561a6951ea3e31c7bff77ffdf694b7d08457cd1e06fc9bae373ad8" name="freeradius-debuginfo" arch="i686">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="cf986eb90e681ef73790e9f58e04b67faad7bc161a99ec72108b89b07757405f" name="freeradius-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="be94ce73739bc1c713587f854aaead3e2f60dd0822fa683ce5b8f5758b58fe7f" name="freeradius-devel" arch="i686">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="d04e99419b779a4d61d096d44b71ed7836b15efa337dd70768406a3ebd191c4a" name="freeradius-devel" arch="x86_64">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="b097852c75451789f9ed58d3cba693ce948ac0af53e241804c74b8bdc239111d" name="freeradius-doc" arch="i686">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="5ad61378ebb9462a6b6412a563ca6171f026421f01d3053d23ae3a740a7f7d82" name="freeradius-doc" arch="x86_64">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="c4cab9c42f9a085eab15f1901ee1f503a4629b711384ef42aa1df41bbc4e0614" name="freeradius-krb5" arch="i686">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="a2a2e7043afc9a61b69b4bf95aa88f0bad22c0cb44096e06bbf1f5114f607d7c" name="freeradius-krb5" arch="x86_64">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="4b616a2c0470642a067da837c597f43afff624f4bf8fde20db1fc35ac818510b" name="freeradius-ldap" arch="i686">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="dbd00d82375bf17c179555cd2735a50fa8c95b6d4c3828ff27ee6626604f883f" name="freeradius-ldap" arch="x86_64">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="bde6c7d384ac94683804a8d2f7d8d26f84c56d074df1caab3060d9ee22e56e06" name="freeradius-mysql" arch="i686">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="6b6152a247cbb9b86dec6adb93ef34526f69c7a862c4fb6cd5fb3b717304c984" name="freeradius-mysql" arch="x86_64">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="75f8c383b9dbf53ab66fea92b7cc4fc6471980eb0937c4546a4ebdae57e5fa4e" name="freeradius-perl" arch="i686">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="fe6af5de9bb91b4fbd7d583d594c83ffa9655305f08c75aa35c9a61d373c4dfe" name="freeradius-perl" arch="x86_64">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="6d05cc15f2205595e3427973b9c716fec6b28cc82c5d22a647e4921349740930" name="freeradius-postgresql" arch="i686">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="bd85945b9d83cfa5cba583d00cf995814c0e798d78d3370af8eeeae8a69b504f" name="freeradius-postgresql" arch="x86_64">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="7afbff6ac20706de131d63e8c4e981cd98f0dc1709ed98cbe1afddc80523cb4c" name="freeradius-python" arch="i686">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="bbfe79334a57d5892055280703ffd090dff1d2bad0022b83851808be26e29243" name="freeradius-python" arch="x86_64">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="ca183429eb969c5072be2fa448b8ddb89cf711be33c570413c7ce46af9201971" name="freeradius-sqlite" arch="i686">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="025dc3e9cce212f7507a33ef24ebca77e93f2ca4458db676f9214c5aa25c806b" name="freeradius-sqlite" arch="x86_64">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="53dad1e11eca5654ca77dade148cfe9bd0d4de17931a5fcba1298a6256b285b2" name="freeradius-unixODBC" arch="i686">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="e4aedec9fde1f1ded3568ef6e24b8609f6c334152e6b2a7ee62f14982a2906e7" name="freeradius-unixODBC" arch="x86_64">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="bfdf9ea3a0b257472b587098dd5875a4336b05ee6f85e872c184b7bd120b9aa9" name="freeradius-utils" arch="i686">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="6c9f5ccd0ce394b548593bbb7bb79173aa4fabbc9cd1ea21a4d11cc46f01155a" name="freeradius-utils" arch="x86_64">
  <version epoch="0" ver="3.0.13" rel="8.el7_4"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-1" date="1480075200">- Upgrade to upstream v3.0.12 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
  Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
                        detail file
  Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
  Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
  Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
                        load
  Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
</package>
<package pkgid="437c0cce6998bb164f957712fc1e047ae7419e57d410cdf2e4036792dd8ad7fc" name="gcab" arch="i686">
  <version epoch="0" ver="0.7" rel="4.el7_4"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-1" date="1426593600">- Update to upstream release v0.6</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6-2" date="1427112000">- Pull in the base library package when installing -devel</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6-3" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-4" date="1438257600">- Fix wrong file modification date when creating cab.</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 0.6-5" date="1448971200">- Bump NVR and rebuild due to a mistakenly deleted build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6-6" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.7-1" date="1457524800">- 0.7 release update.</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-2" date="1488456000">- Fix some bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-3" date="1488801600">- Fix some more bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-4" date="1518609600">- Fixes the security issue known as CVE-2018-5345
- Resolves: #1533174</changelog>
</package>
<package pkgid="8128842260f0fb259ff28e22a25461037f2d166db57de5c5fddb6e72577871f9" name="gcab" arch="src">
  <version epoch="0" ver="0.7" rel="4.el7_4"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-1" date="1426593600">- Update to upstream release v0.6</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6-2" date="1427112000">- Pull in the base library package when installing -devel</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6-3" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-4" date="1438257600">- Fix wrong file modification date when creating cab.</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 0.6-5" date="1448971200">- Bump NVR and rebuild due to a mistakenly deleted build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6-6" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.7-1" date="1457524800">- 0.7 release update.</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-2" date="1488456000">- Fix some bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-3" date="1488801600">- Fix some more bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-4" date="1518609600">- Fixes the security issue known as CVE-2018-5345
- Resolves: #1533174</changelog>
</package>
<package pkgid="4a56772f5f2cb5c14747c1a68b9aa23caaac58a9f2df3656217529413d0bbd8c" name="gcab" arch="src">
  <version epoch="0" ver="0.7" rel="4.el7_4"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-1" date="1426593600">- Update to upstream release v0.6</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6-2" date="1427112000">- Pull in the base library package when installing -devel</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6-3" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-4" date="1438257600">- Fix wrong file modification date when creating cab.</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 0.6-5" date="1448971200">- Bump NVR and rebuild due to a mistakenly deleted build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6-6" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.7-1" date="1457524800">- 0.7 release update.</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-2" date="1488456000">- Fix some bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-3" date="1488801600">- Fix some more bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-4" date="1518609600">- Fixes the security issue known as CVE-2018-5345
- Resolves: #1533174</changelog>
</package>
<package pkgid="4dc45e4d5da67f24b520a9993b2a691a7b6609a0cfafbde8c81935f38830a4bf" name="gcab" arch="x86_64">
  <version epoch="0" ver="0.7" rel="4.el7_4"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-1" date="1426593600">- Update to upstream release v0.6</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6-2" date="1427112000">- Pull in the base library package when installing -devel</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6-3" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-4" date="1438257600">- Fix wrong file modification date when creating cab.</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 0.6-5" date="1448971200">- Bump NVR and rebuild due to a mistakenly deleted build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6-6" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.7-1" date="1457524800">- 0.7 release update.</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-2" date="1488456000">- Fix some bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-3" date="1488801600">- Fix some more bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-4" date="1518609600">- Fixes the security issue known as CVE-2018-5345
- Resolves: #1533174</changelog>
</package>
<package pkgid="a3c7df6f3216b684fe0022f414d9bd818a2a837679e3e9fb8a4ab93cc990050d" name="gcab-debuginfo" arch="i686">
  <version epoch="0" ver="0.7" rel="4.el7_4"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-1" date="1426593600">- Update to upstream release v0.6</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6-2" date="1427112000">- Pull in the base library package when installing -devel</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6-3" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-4" date="1438257600">- Fix wrong file modification date when creating cab.</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 0.6-5" date="1448971200">- Bump NVR and rebuild due to a mistakenly deleted build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6-6" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.7-1" date="1457524800">- 0.7 release update.</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-2" date="1488456000">- Fix some bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-3" date="1488801600">- Fix some more bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-4" date="1518609600">- Fixes the security issue known as CVE-2018-5345
- Resolves: #1533174</changelog>
</package>
<package pkgid="f38869d947c83e667b4c5e9abe05ff83846846707558a71ace774e357cf46f7b" name="gcab-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7" rel="4.el7_4"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-1" date="1426593600">- Update to upstream release v0.6</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6-2" date="1427112000">- Pull in the base library package when installing -devel</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6-3" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-4" date="1438257600">- Fix wrong file modification date when creating cab.</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 0.6-5" date="1448971200">- Bump NVR and rebuild due to a mistakenly deleted build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6-6" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.7-1" date="1457524800">- 0.7 release update.</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-2" date="1488456000">- Fix some bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-3" date="1488801600">- Fix some more bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-4" date="1518609600">- Fixes the security issue known as CVE-2018-5345
- Resolves: #1533174</changelog>
</package>
<package pkgid="f580aeb658bc1667627f30a49ee5c842f52d817d691aba5c4443c90b803262b2" name="gcc" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="454d3e5471dc7fecf34bc3c03329894bc946d5104b161b6e1b1d271882d0cee6" name="gcc" arch="src">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="11a4e00665b3018fdf9340dc5aaecaf8e044a66934a845ab78108055b0bda504" name="gcc" arch="src">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="47f067e177050c6b12c7a9126019de64f020e722000a9401e4471d3f9c448ab3" name="gcc" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="6664bd47a4b0aaf0371beb9b50bb498d25db1b1b1634a108348bcbca3cac87de" name="gcc" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="f09c12ab30f17898c62f741ac29dbdfdbec8f1d032c9cdb8d0eb61f430a3074c" name="gcc" arch="src">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="b77cfef15b08dff54fcec5781c0b3355885146f989470a34cefa47ac5e586b37" name="gcc" arch="src">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="f9ab63cf287f7a623651c51ca10977b87199299a1b29baa339bc57c2965be215" name="gcc" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="972b12f4b20d45048ecd2990b7a3d838f6aa65bf5786bb93fa6df7f5b487ee2f" name="gcc-base-debuginfo" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="8b9f4739c2aeffa4143fbaa63a6dc5b7dd00f16e7d4fbf7d4c8769819672e26c" name="gcc-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="798376f44cfc5ff0d78aa366accfabc672aa35e60bea2be993cae060593924c4" name="gcc-base-debuginfo" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="6188f011c3cbb8a1fa78847568630e8452ee89f3db3ced9256bc2096461e2af9" name="gcc-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="f9ffc248038a1c5caf3469df59019c78af7d39647b672786245365963ca0e309" name="gcc-c++" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="4da258822cba24ee3f61b56e2eabea481e2746c559f277b7694f11fa70b5d6b9" name="gcc-c++" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="601b2be4bb3b3a0343622f6fb8facd96bc2b906a0894a297feae966bab3cb621" name="gcc-c++" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="5af53a2639b500b1053f17084a36d88d37251357731a060c70ee54138a78ac56" name="gcc-c++" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="04d16e35dfca3561401551d8d8f41d1c5660496ce7dc20a1a8c67a62f9c7cbb4" name="gcc-debuginfo" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="5e35a73180f9f3f332a1399304aad1aeefebedac86c377d03ff729233ba49931" name="gcc-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="ffa20a6c9fa5f640cbf8d798287233907f1ba0409b3e2c1a4ffba3b29655aa85" name="gcc-debuginfo" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="7bd75057d19bf148fa9d25bc2faafe9a8bce36296c62c2b9ae11b0c784d770d2" name="gcc-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="ed741b3d95565029ceb256385f00d23885cdab23cd85dcc22be635e06ba7c518" name="gcc-gfortran" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="07c7adaa167e1318fe3af2b8c3d8eda29df07c902626897c303fc13095261d5a" name="gcc-gfortran" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="ba7bfeab6e6db0dc3bbd4735823a884d9dc8865fe2feb774c27be192bbc20e10" name="gcc-gfortran" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="4c9c7694c9db7d8817a2560123c816a8148037bfe80acfba465ad7a63d76fbf8" name="gcc-gfortran" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="06b72d64bc1bfd9eed1ed0ee9daebfbbc141478a8459171fb58f1245e64efa62" name="gcc-gnat" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="79fce06a8264c876e985727849b34519b6cba12c99880cbc67eea6dd3137645a" name="gcc-gnat" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="5c0a2aaeb52279deba5f3b68c16b3a3481c06ac3e8f65625d70bbf4dde057820" name="gcc-gnat" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="0109ad17937fb0b99451f9c5dc3e4ea92cea0ff740a7c0dc55a2d028241d224a" name="gcc-gnat" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="d9395bcd33df6a564d86fb43e1e8c37ca015c59e6cf9bd3f94c436064bbbb7c4" name="gcc-go" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="d26d2e7e9d82dae8e307698d0ea94640a2c1d95306526117552e1588814ab734" name="gcc-go" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="5b5fa62df74a739c78d85af4741157ff8fd0ea0f29a5bd31e7e1438b51dde589" name="gcc-go" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="c9462311043944250c428e08cb1d9177dd3b3f3a1b6313af3c2ca83395e37731" name="gcc-go" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="7c314e0439b1332b8f8b25ca75c62372e2bcad032896f578c0b22adb764cc574" name="gcc-objc++" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="34952c5656dcd4f673aeba0d0f9bb6b931affd41231102cb50604b4fd93aadce" name="gcc-objc++" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="95014ee9f03c009721e3496659f6e487ca2ac8d643c92d288d80409f617da66d" name="gcc-objc++" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="9a625260c2523a5194d202fedbffbf4fd29b038e68495e26150c929ee6a7240b" name="gcc-objc++" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="663fd12b629715ec2a6821f399e646b68210f4bb7d4119bf09c21dbdb0a77911" name="gcc-objc" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="d7959204b5341c77ba4f3f5ba87cd472a47163b6889dce4f15aa8f7bd58f39c0" name="gcc-objc" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="3ba410c3a3a933a2c937e4df5b9cbb9d67d3b648c5fa634b325b34fdbebedf4f" name="gcc-objc" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="3857f42d5a89ff26bd9380c2527727c80b7381c2fbd21d5cefd61077fb13494c" name="gcc-objc" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="ac26a98721a9fd40f73ca6083ff8e7285ef01d679ebac42d809563bfde3a5f73" name="gcc-plugin-devel" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="83655d8b9b21e266fe111508f94e5b3d3e63b29d5096f31a0d587fe8a6d02b05" name="gcc-plugin-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="2fbde69b5bd2a8c3e550313955144e190b2fbeb798284f0ef10a540eddb5a7d3" name="gcc-plugin-devel" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="2c9df370e1bf950a455c2369300579f1dc91ef632a1b0f7660f178d112296187" name="gcc-plugin-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="a0ff5c3311a1d5e70efb50095d5929032940b37122109c199b6ab9c2150e3fd4" name="gdb" arch="i686">
  <version epoch="0" ver="7.6.1" rel="100.el7_4.1"/>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-92.el7" date="1464609600">- Import bare DW_TAG_lexical_block (RH BZ 1325396).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-93.el7" date="1467028800">- Fix 'info type-printers' Python error (Clem Dickey, RH BZ 1350436).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-94.el7" date="1470225600">- [aarch64] Fix ARMv8.1/v8.2 for hw watchpoint and breakpoint
  (Andrew Pinski, RH BZ 1363635).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-95.el7" date="1488801600">- Fix RHEL GDB build with devtoolset-*-build installed (RH BZ 1422193).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-96.el7" date="1488974400">- [testsuite] Fix ppc64 run of dw2-lexical-block-bare.exp (RH BZ 1357079).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-97.el7" date="1489147200">- [testsuite] [ppc*,s390*] Do not FAIL rhbz1261564-aarch64-watchpoint.exp
  (RH BZ 1352563).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-98.el7" date="1489924800">- [ppc*] IBM Power9 and __float128 backport (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-99.el7" date="1492776000">- [ppc*] Fix gdb.arch/powerpc-power7.exp testcase regression (RH BZ 1440044).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7" date="1497355200">- [ppc*] IBM Power9 backport extension (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7_4.1" date="1512993600">- Fix gcore for memory regions with VM_DONTDUMP (RH BZ 1524312, Sergio Lopez).</changelog>
</package>
<package pkgid="3711ef5bee483734a070abc0a802cd3d09e6ba70aac914c833279c6db5d40198" name="gdb" arch="src">
  <version epoch="0" ver="7.6.1" rel="100.el7_4.1"/>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-92.el7" date="1464609600">- Import bare DW_TAG_lexical_block (RH BZ 1325396).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-93.el7" date="1467028800">- Fix 'info type-printers' Python error (Clem Dickey, RH BZ 1350436).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-94.el7" date="1470225600">- [aarch64] Fix ARMv8.1/v8.2 for hw watchpoint and breakpoint
  (Andrew Pinski, RH BZ 1363635).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-95.el7" date="1488801600">- Fix RHEL GDB build with devtoolset-*-build installed (RH BZ 1422193).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-96.el7" date="1488974400">- [testsuite] Fix ppc64 run of dw2-lexical-block-bare.exp (RH BZ 1357079).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-97.el7" date="1489147200">- [testsuite] [ppc*,s390*] Do not FAIL rhbz1261564-aarch64-watchpoint.exp
  (RH BZ 1352563).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-98.el7" date="1489924800">- [ppc*] IBM Power9 and __float128 backport (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-99.el7" date="1492776000">- [ppc*] Fix gdb.arch/powerpc-power7.exp testcase regression (RH BZ 1440044).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7" date="1497355200">- [ppc*] IBM Power9 backport extension (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7_4.1" date="1512993600">- Fix gcore for memory regions with VM_DONTDUMP (RH BZ 1524312, Sergio Lopez).</changelog>
</package>
<package pkgid="86bc40eb24cdd70f0f7a069bcd539fa07b6b53e3148013e637de99ed65cfd90b" name="gdb" arch="src">
  <version epoch="0" ver="7.6.1" rel="100.el7_4.1"/>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-92.el7" date="1464609600">- Import bare DW_TAG_lexical_block (RH BZ 1325396).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-93.el7" date="1467028800">- Fix 'info type-printers' Python error (Clem Dickey, RH BZ 1350436).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-94.el7" date="1470225600">- [aarch64] Fix ARMv8.1/v8.2 for hw watchpoint and breakpoint
  (Andrew Pinski, RH BZ 1363635).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-95.el7" date="1488801600">- Fix RHEL GDB build with devtoolset-*-build installed (RH BZ 1422193).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-96.el7" date="1488974400">- [testsuite] Fix ppc64 run of dw2-lexical-block-bare.exp (RH BZ 1357079).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-97.el7" date="1489147200">- [testsuite] [ppc*,s390*] Do not FAIL rhbz1261564-aarch64-watchpoint.exp
  (RH BZ 1352563).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-98.el7" date="1489924800">- [ppc*] IBM Power9 and __float128 backport (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-99.el7" date="1492776000">- [ppc*] Fix gdb.arch/powerpc-power7.exp testcase regression (RH BZ 1440044).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7" date="1497355200">- [ppc*] IBM Power9 backport extension (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7_4.1" date="1512993600">- Fix gcore for memory regions with VM_DONTDUMP (RH BZ 1524312, Sergio Lopez).</changelog>
</package>
<package pkgid="b22d33f1fafe156afe2f0d69248ee35bbc17b132eef9b4e7f5ea2077e054ed67" name="gdb" arch="x86_64">
  <version epoch="0" ver="7.6.1" rel="100.el7_4.1"/>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-92.el7" date="1464609600">- Import bare DW_TAG_lexical_block (RH BZ 1325396).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-93.el7" date="1467028800">- Fix 'info type-printers' Python error (Clem Dickey, RH BZ 1350436).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-94.el7" date="1470225600">- [aarch64] Fix ARMv8.1/v8.2 for hw watchpoint and breakpoint
  (Andrew Pinski, RH BZ 1363635).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-95.el7" date="1488801600">- Fix RHEL GDB build with devtoolset-*-build installed (RH BZ 1422193).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-96.el7" date="1488974400">- [testsuite] Fix ppc64 run of dw2-lexical-block-bare.exp (RH BZ 1357079).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-97.el7" date="1489147200">- [testsuite] [ppc*,s390*] Do not FAIL rhbz1261564-aarch64-watchpoint.exp
  (RH BZ 1352563).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-98.el7" date="1489924800">- [ppc*] IBM Power9 and __float128 backport (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-99.el7" date="1492776000">- [ppc*] Fix gdb.arch/powerpc-power7.exp testcase regression (RH BZ 1440044).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7" date="1497355200">- [ppc*] IBM Power9 backport extension (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7_4.1" date="1512993600">- Fix gcore for memory regions with VM_DONTDUMP (RH BZ 1524312, Sergio Lopez).</changelog>
</package>
<package pkgid="126d07f0cdb3dd4ece67d59dd60c57f4546803387c7554478ef6ade3a9fb4625" name="gdb-debuginfo" arch="i686">
  <version epoch="0" ver="7.6.1" rel="100.el7_4.1"/>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-92.el7" date="1464609600">- Import bare DW_TAG_lexical_block (RH BZ 1325396).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-93.el7" date="1467028800">- Fix 'info type-printers' Python error (Clem Dickey, RH BZ 1350436).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-94.el7" date="1470225600">- [aarch64] Fix ARMv8.1/v8.2 for hw watchpoint and breakpoint
  (Andrew Pinski, RH BZ 1363635).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-95.el7" date="1488801600">- Fix RHEL GDB build with devtoolset-*-build installed (RH BZ 1422193).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-96.el7" date="1488974400">- [testsuite] Fix ppc64 run of dw2-lexical-block-bare.exp (RH BZ 1357079).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-97.el7" date="1489147200">- [testsuite] [ppc*,s390*] Do not FAIL rhbz1261564-aarch64-watchpoint.exp
  (RH BZ 1352563).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-98.el7" date="1489924800">- [ppc*] IBM Power9 and __float128 backport (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-99.el7" date="1492776000">- [ppc*] Fix gdb.arch/powerpc-power7.exp testcase regression (RH BZ 1440044).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7" date="1497355200">- [ppc*] IBM Power9 backport extension (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7_4.1" date="1512993600">- Fix gcore for memory regions with VM_DONTDUMP (RH BZ 1524312, Sergio Lopez).</changelog>
</package>
<package pkgid="68db4b99bae3665945f8b2d29e3622355fb53fd48ab837c9e894212f8175d551" name="gdb-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.6.1" rel="100.el7_4.1"/>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-92.el7" date="1464609600">- Import bare DW_TAG_lexical_block (RH BZ 1325396).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-93.el7" date="1467028800">- Fix 'info type-printers' Python error (Clem Dickey, RH BZ 1350436).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-94.el7" date="1470225600">- [aarch64] Fix ARMv8.1/v8.2 for hw watchpoint and breakpoint
  (Andrew Pinski, RH BZ 1363635).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-95.el7" date="1488801600">- Fix RHEL GDB build with devtoolset-*-build installed (RH BZ 1422193).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-96.el7" date="1488974400">- [testsuite] Fix ppc64 run of dw2-lexical-block-bare.exp (RH BZ 1357079).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-97.el7" date="1489147200">- [testsuite] [ppc*,s390*] Do not FAIL rhbz1261564-aarch64-watchpoint.exp
  (RH BZ 1352563).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-98.el7" date="1489924800">- [ppc*] IBM Power9 and __float128 backport (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-99.el7" date="1492776000">- [ppc*] Fix gdb.arch/powerpc-power7.exp testcase regression (RH BZ 1440044).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7" date="1497355200">- [ppc*] IBM Power9 backport extension (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7_4.1" date="1512993600">- Fix gcore for memory regions with VM_DONTDUMP (RH BZ 1524312, Sergio Lopez).</changelog>
</package>
<package pkgid="0267cd4fe7941d433dfd1431b340dd3369b72e84cd0b02c1c5f2f2d9d4d70154" name="gdb-doc" arch="noarch">
  <version epoch="0" ver="7.6.1" rel="100.el7_4.1"/>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-92.el7" date="1464609600">- Import bare DW_TAG_lexical_block (RH BZ 1325396).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-93.el7" date="1467028800">- Fix 'info type-printers' Python error (Clem Dickey, RH BZ 1350436).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-94.el7" date="1470225600">- [aarch64] Fix ARMv8.1/v8.2 for hw watchpoint and breakpoint
  (Andrew Pinski, RH BZ 1363635).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-95.el7" date="1488801600">- Fix RHEL GDB build with devtoolset-*-build installed (RH BZ 1422193).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-96.el7" date="1488974400">- [testsuite] Fix ppc64 run of dw2-lexical-block-bare.exp (RH BZ 1357079).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-97.el7" date="1489147200">- [testsuite] [ppc*,s390*] Do not FAIL rhbz1261564-aarch64-watchpoint.exp
  (RH BZ 1352563).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-98.el7" date="1489924800">- [ppc*] IBM Power9 and __float128 backport (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-99.el7" date="1492776000">- [ppc*] Fix gdb.arch/powerpc-power7.exp testcase regression (RH BZ 1440044).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7" date="1497355200">- [ppc*] IBM Power9 backport extension (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7_4.1" date="1512993600">- Fix gcore for memory regions with VM_DONTDUMP (RH BZ 1524312, Sergio Lopez).</changelog>
</package>
<package pkgid="d1a2e7458d524488f18cbfbd0127cd8b3884eb2835897a3de9d7a485a12ab040" name="gdb-doc" arch="noarch">
  <version epoch="0" ver="7.6.1" rel="100.el7_4.1"/>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-92.el7" date="1464609600">- Import bare DW_TAG_lexical_block (RH BZ 1325396).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-93.el7" date="1467028800">- Fix 'info type-printers' Python error (Clem Dickey, RH BZ 1350436).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-94.el7" date="1470225600">- [aarch64] Fix ARMv8.1/v8.2 for hw watchpoint and breakpoint
  (Andrew Pinski, RH BZ 1363635).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-95.el7" date="1488801600">- Fix RHEL GDB build with devtoolset-*-build installed (RH BZ 1422193).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-96.el7" date="1488974400">- [testsuite] Fix ppc64 run of dw2-lexical-block-bare.exp (RH BZ 1357079).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-97.el7" date="1489147200">- [testsuite] [ppc*,s390*] Do not FAIL rhbz1261564-aarch64-watchpoint.exp
  (RH BZ 1352563).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-98.el7" date="1489924800">- [ppc*] IBM Power9 and __float128 backport (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-99.el7" date="1492776000">- [ppc*] Fix gdb.arch/powerpc-power7.exp testcase regression (RH BZ 1440044).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7" date="1497355200">- [ppc*] IBM Power9 backport extension (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7_4.1" date="1512993600">- Fix gcore for memory regions with VM_DONTDUMP (RH BZ 1524312, Sergio Lopez).</changelog>
</package>
<package pkgid="61f029d53f1e84970d9d3de653d19bd201c80ec8a0c92699605dd3d213f5c3b2" name="gdb-gdbserver" arch="i686">
  <version epoch="0" ver="7.6.1" rel="100.el7_4.1"/>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-92.el7" date="1464609600">- Import bare DW_TAG_lexical_block (RH BZ 1325396).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-93.el7" date="1467028800">- Fix 'info type-printers' Python error (Clem Dickey, RH BZ 1350436).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-94.el7" date="1470225600">- [aarch64] Fix ARMv8.1/v8.2 for hw watchpoint and breakpoint
  (Andrew Pinski, RH BZ 1363635).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-95.el7" date="1488801600">- Fix RHEL GDB build with devtoolset-*-build installed (RH BZ 1422193).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-96.el7" date="1488974400">- [testsuite] Fix ppc64 run of dw2-lexical-block-bare.exp (RH BZ 1357079).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-97.el7" date="1489147200">- [testsuite] [ppc*,s390*] Do not FAIL rhbz1261564-aarch64-watchpoint.exp
  (RH BZ 1352563).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-98.el7" date="1489924800">- [ppc*] IBM Power9 and __float128 backport (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-99.el7" date="1492776000">- [ppc*] Fix gdb.arch/powerpc-power7.exp testcase regression (RH BZ 1440044).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7" date="1497355200">- [ppc*] IBM Power9 backport extension (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7_4.1" date="1512993600">- Fix gcore for memory regions with VM_DONTDUMP (RH BZ 1524312, Sergio Lopez).</changelog>
</package>
<package pkgid="a01aa1950b159b24201e6b11944f91de63d716aee412d9e92c25465e211647a0" name="gdb-gdbserver" arch="x86_64">
  <version epoch="0" ver="7.6.1" rel="100.el7_4.1"/>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-92.el7" date="1464609600">- Import bare DW_TAG_lexical_block (RH BZ 1325396).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-93.el7" date="1467028800">- Fix 'info type-printers' Python error (Clem Dickey, RH BZ 1350436).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-94.el7" date="1470225600">- [aarch64] Fix ARMv8.1/v8.2 for hw watchpoint and breakpoint
  (Andrew Pinski, RH BZ 1363635).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-95.el7" date="1488801600">- Fix RHEL GDB build with devtoolset-*-build installed (RH BZ 1422193).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-96.el7" date="1488974400">- [testsuite] Fix ppc64 run of dw2-lexical-block-bare.exp (RH BZ 1357079).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-97.el7" date="1489147200">- [testsuite] [ppc*,s390*] Do not FAIL rhbz1261564-aarch64-watchpoint.exp
  (RH BZ 1352563).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-98.el7" date="1489924800">- [ppc*] IBM Power9 and __float128 backport (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-99.el7" date="1492776000">- [ppc*] Fix gdb.arch/powerpc-power7.exp testcase regression (RH BZ 1440044).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7" date="1497355200">- [ppc*] IBM Power9 backport extension (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7_4.1" date="1512993600">- Fix gcore for memory regions with VM_DONTDUMP (RH BZ 1524312, Sergio Lopez).</changelog>
</package>
<package pkgid="7a609b239c6146bdf2287dbaf7927ac3769412dfbe39df0026eb58588eb3256f" name="gdm" arch="i686">
  <version epoch="1" ver="3.22.3" rel="12.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-3" date="1489147200">- Don't fall over if autologin user isn't available
  Resolves #1373837</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-4" date="1489665600">- Drop reference to wayland in config file
- use autosetup to simplify spec maintenance
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-5" date="1489665601">- Attempt to fix po file installation
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-6" date="1490961600">- Fix indirect XDMCP
  Resolves: #1273156</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-7" date="1491220800">- Fix user switching
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.22.3-8" date="1491393600">- Reap transient login screens when they are no longer needed
- Jump to login screen if we end up on a blank VT
  Resolves: #1301028</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-9" date="1493899200">- Make sure reauthentication is run within the user
  session.
  Resolves:#1448209</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-10" date="1494590400">- Add patches to try to maintain some semblance of compatibility
  when live upgrading between 7.3 and 7.4
  Related: #1448786</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-11" date="1496145600">- Add japanese translation
  Resolves: #1449632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-12" date="1499860800">- Ensure X server is dead after logout
  Resolves: #1469755</changelog>
</package>
<package pkgid="5eb7e7e59aaeef2bc1fd550f8f1ba72a12e20be3fa4fc3f5500c028b59a3106c" name="gdm" arch="src">
  <version epoch="1" ver="3.22.3" rel="12.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-3" date="1489147200">- Don't fall over if autologin user isn't available
  Resolves #1373837</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-4" date="1489665600">- Drop reference to wayland in config file
- use autosetup to simplify spec maintenance
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-5" date="1489665601">- Attempt to fix po file installation
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-6" date="1490961600">- Fix indirect XDMCP
  Resolves: #1273156</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-7" date="1491220800">- Fix user switching
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.22.3-8" date="1491393600">- Reap transient login screens when they are no longer needed
- Jump to login screen if we end up on a blank VT
  Resolves: #1301028</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-9" date="1493899200">- Make sure reauthentication is run within the user
  session.
  Resolves:#1448209</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-10" date="1494590400">- Add patches to try to maintain some semblance of compatibility
  when live upgrading between 7.3 and 7.4
  Related: #1448786</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-11" date="1496145600">- Add japanese translation
  Resolves: #1449632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-12" date="1499860800">- Ensure X server is dead after logout
  Resolves: #1469755</changelog>
</package>
<package pkgid="aa9a0d618e1068795510f448e49b07bbbc4ab5c861b635e7dad566d70e361889" name="gdm" arch="src">
  <version epoch="1" ver="3.22.3" rel="12.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-3" date="1489147200">- Don't fall over if autologin user isn't available
  Resolves #1373837</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-4" date="1489665600">- Drop reference to wayland in config file
- use autosetup to simplify spec maintenance
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-5" date="1489665601">- Attempt to fix po file installation
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-6" date="1490961600">- Fix indirect XDMCP
  Resolves: #1273156</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-7" date="1491220800">- Fix user switching
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.22.3-8" date="1491393600">- Reap transient login screens when they are no longer needed
- Jump to login screen if we end up on a blank VT
  Resolves: #1301028</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-9" date="1493899200">- Make sure reauthentication is run within the user
  session.
  Resolves:#1448209</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-10" date="1494590400">- Add patches to try to maintain some semblance of compatibility
  when live upgrading between 7.3 and 7.4
  Related: #1448786</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-11" date="1496145600">- Add japanese translation
  Resolves: #1449632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-12" date="1499860800">- Ensure X server is dead after logout
  Resolves: #1469755</changelog>
</package>
<package pkgid="db3cf92e5d18a537b0c24d0a127fb2c576eade4911ba9b3ca7b17904a2e10d81" name="gdm" arch="x86_64">
  <version epoch="1" ver="3.22.3" rel="12.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-3" date="1489147200">- Don't fall over if autologin user isn't available
  Resolves #1373837</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-4" date="1489665600">- Drop reference to wayland in config file
- use autosetup to simplify spec maintenance
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-5" date="1489665601">- Attempt to fix po file installation
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-6" date="1490961600">- Fix indirect XDMCP
  Resolves: #1273156</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-7" date="1491220800">- Fix user switching
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.22.3-8" date="1491393600">- Reap transient login screens when they are no longer needed
- Jump to login screen if we end up on a blank VT
  Resolves: #1301028</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-9" date="1493899200">- Make sure reauthentication is run within the user
  session.
  Resolves:#1448209</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-10" date="1494590400">- Add patches to try to maintain some semblance of compatibility
  when live upgrading between 7.3 and 7.4
  Related: #1448786</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-11" date="1496145600">- Add japanese translation
  Resolves: #1449632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-12" date="1499860800">- Ensure X server is dead after logout
  Resolves: #1469755</changelog>
</package>
<package pkgid="b81465b59631940d42ed488ad932fd5a17c57219c0299d4cb52cbd1118501573" name="gdm" arch="i686">
  <version epoch="1" ver="3.22.3" rel="13.el7_4"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-4" date="1489665600">- Drop reference to wayland in config file
- use autosetup to simplify spec maintenance
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-5" date="1489665601">- Attempt to fix po file installation
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-6" date="1490961600">- Fix indirect XDMCP
  Resolves: #1273156</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-7" date="1491220800">- Fix user switching
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.22.3-8" date="1491393600">- Reap transient login screens when they are no longer needed
- Jump to login screen if we end up on a blank VT
  Resolves: #1301028</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-9" date="1493899200">- Make sure reauthentication is run within the user
  session.
  Resolves:#1448209</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-10" date="1494590400">- Add patches to try to maintain some semblance of compatibility
  when live upgrading between 7.3 and 7.4
  Related: #1448786</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-11" date="1496145600">- Add japanese translation
  Resolves: #1449632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-12" date="1499860800">- Ensure X server is dead after logout
  Resolves: #1469755</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-13" date="1512388800">- fix reauth crash
  Resolves: #1519250</changelog>
</package>
<package pkgid="ab796916ba3ad9cae0e7cc4a20aa9f87697920e60237581227c0d4c25f8b7de6" name="gdm" arch="src">
  <version epoch="1" ver="3.22.3" rel="13.el7_4"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-4" date="1489665600">- Drop reference to wayland in config file
- use autosetup to simplify spec maintenance
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-5" date="1489665601">- Attempt to fix po file installation
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-6" date="1490961600">- Fix indirect XDMCP
  Resolves: #1273156</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-7" date="1491220800">- Fix user switching
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.22.3-8" date="1491393600">- Reap transient login screens when they are no longer needed
- Jump to login screen if we end up on a blank VT
  Resolves: #1301028</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-9" date="1493899200">- Make sure reauthentication is run within the user
  session.
  Resolves:#1448209</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-10" date="1494590400">- Add patches to try to maintain some semblance of compatibility
  when live upgrading between 7.3 and 7.4
  Related: #1448786</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-11" date="1496145600">- Add japanese translation
  Resolves: #1449632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-12" date="1499860800">- Ensure X server is dead after logout
  Resolves: #1469755</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-13" date="1512388800">- fix reauth crash
  Resolves: #1519250</changelog>
</package>
<package pkgid="b8b9e375abbc36786e65c70dceead240e89d0ab97f71d62b131bcd48c08e11af" name="gdm" arch="src">
  <version epoch="1" ver="3.22.3" rel="13.el7_4"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-4" date="1489665600">- Drop reference to wayland in config file
- use autosetup to simplify spec maintenance
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-5" date="1489665601">- Attempt to fix po file installation
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-6" date="1490961600">- Fix indirect XDMCP
  Resolves: #1273156</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-7" date="1491220800">- Fix user switching
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.22.3-8" date="1491393600">- Reap transient login screens when they are no longer needed
- Jump to login screen if we end up on a blank VT
  Resolves: #1301028</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-9" date="1493899200">- Make sure reauthentication is run within the user
  session.
  Resolves:#1448209</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-10" date="1494590400">- Add patches to try to maintain some semblance of compatibility
  when live upgrading between 7.3 and 7.4
  Related: #1448786</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-11" date="1496145600">- Add japanese translation
  Resolves: #1449632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-12" date="1499860800">- Ensure X server is dead after logout
  Resolves: #1469755</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-13" date="1512388800">- fix reauth crash
  Resolves: #1519250</changelog>
</package>
<package pkgid="c0343aaa687f4ff86b076df603c29245f426852397860be82d121b27e573c5b0" name="gdm" arch="x86_64">
  <version epoch="1" ver="3.22.3" rel="13.el7_4"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-4" date="1489665600">- Drop reference to wayland in config file
- use autosetup to simplify spec maintenance
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-5" date="1489665601">- Attempt to fix po file installation
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-6" date="1490961600">- Fix indirect XDMCP
  Resolves: #1273156</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-7" date="1491220800">- Fix user switching
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.22.3-8" date="1491393600">- Reap transient login screens when they are no longer needed
- Jump to login screen if we end up on a blank VT
  Resolves: #1301028</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-9" date="1493899200">- Make sure reauthentication is run within the user
  session.
  Resolves:#1448209</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-10" date="1494590400">- Add patches to try to maintain some semblance of compatibility
  when live upgrading between 7.3 and 7.4
  Related: #1448786</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-11" date="1496145600">- Add japanese translation
  Resolves: #1449632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-12" date="1499860800">- Ensure X server is dead after logout
  Resolves: #1469755</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-13" date="1512388800">- fix reauth crash
  Resolves: #1519250</changelog>
</package>
<package pkgid="a32814719d51c56a0df18d4573d9ff5ec3fb4585e1fb202223c32a7b13b8a2ae" name="gdm-debuginfo" arch="i686">
  <version epoch="1" ver="3.22.3" rel="12.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-3" date="1489147200">- Don't fall over if autologin user isn't available
  Resolves #1373837</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-4" date="1489665600">- Drop reference to wayland in config file
- use autosetup to simplify spec maintenance
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-5" date="1489665601">- Attempt to fix po file installation
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-6" date="1490961600">- Fix indirect XDMCP
  Resolves: #1273156</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-7" date="1491220800">- Fix user switching
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.22.3-8" date="1491393600">- Reap transient login screens when they are no longer needed
- Jump to login screen if we end up on a blank VT
  Resolves: #1301028</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-9" date="1493899200">- Make sure reauthentication is run within the user
  session.
  Resolves:#1448209</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-10" date="1494590400">- Add patches to try to maintain some semblance of compatibility
  when live upgrading between 7.3 and 7.4
  Related: #1448786</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-11" date="1496145600">- Add japanese translation
  Resolves: #1449632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-12" date="1499860800">- Ensure X server is dead after logout
  Resolves: #1469755</changelog>
</package>
<package pkgid="1e3eb13fec72d4676e6662c927833e33ba22d3ceb6753d58bfa969726d08c435" name="gdm-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.22.3" rel="12.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-3" date="1489147200">- Don't fall over if autologin user isn't available
  Resolves #1373837</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-4" date="1489665600">- Drop reference to wayland in config file
- use autosetup to simplify spec maintenance
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-5" date="1489665601">- Attempt to fix po file installation
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-6" date="1490961600">- Fix indirect XDMCP
  Resolves: #1273156</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-7" date="1491220800">- Fix user switching
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.22.3-8" date="1491393600">- Reap transient login screens when they are no longer needed
- Jump to login screen if we end up on a blank VT
  Resolves: #1301028</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-9" date="1493899200">- Make sure reauthentication is run within the user
  session.
  Resolves:#1448209</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-10" date="1494590400">- Add patches to try to maintain some semblance of compatibility
  when live upgrading between 7.3 and 7.4
  Related: #1448786</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-11" date="1496145600">- Add japanese translation
  Resolves: #1449632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-12" date="1499860800">- Ensure X server is dead after logout
  Resolves: #1469755</changelog>
</package>
<package pkgid="5856f2b66c0a906aa4a003f313085c79e9963de1f2b9a94ff7900de764b32d0c" name="gdm-debuginfo" arch="i686">
  <version epoch="1" ver="3.22.3" rel="13.el7_4"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-4" date="1489665600">- Drop reference to wayland in config file
- use autosetup to simplify spec maintenance
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-5" date="1489665601">- Attempt to fix po file installation
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-6" date="1490961600">- Fix indirect XDMCP
  Resolves: #1273156</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-7" date="1491220800">- Fix user switching
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.22.3-8" date="1491393600">- Reap transient login screens when they are no longer needed
- Jump to login screen if we end up on a blank VT
  Resolves: #1301028</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-9" date="1493899200">- Make sure reauthentication is run within the user
  session.
  Resolves:#1448209</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-10" date="1494590400">- Add patches to try to maintain some semblance of compatibility
  when live upgrading between 7.3 and 7.4
  Related: #1448786</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-11" date="1496145600">- Add japanese translation
  Resolves: #1449632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-12" date="1499860800">- Ensure X server is dead after logout
  Resolves: #1469755</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-13" date="1512388800">- fix reauth crash
  Resolves: #1519250</changelog>
</package>
<package pkgid="93e69e06369da5dc7291ba097c62e393c6c48bf6ec45b729ee8851d869a688d0" name="gdm-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.22.3" rel="13.el7_4"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-4" date="1489665600">- Drop reference to wayland in config file
- use autosetup to simplify spec maintenance
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-5" date="1489665601">- Attempt to fix po file installation
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-6" date="1490961600">- Fix indirect XDMCP
  Resolves: #1273156</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-7" date="1491220800">- Fix user switching
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.22.3-8" date="1491393600">- Reap transient login screens when they are no longer needed
- Jump to login screen if we end up on a blank VT
  Resolves: #1301028</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-9" date="1493899200">- Make sure reauthentication is run within the user
  session.
  Resolves:#1448209</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-10" date="1494590400">- Add patches to try to maintain some semblance of compatibility
  when live upgrading between 7.3 and 7.4
  Related: #1448786</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-11" date="1496145600">- Add japanese translation
  Resolves: #1449632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-12" date="1499860800">- Ensure X server is dead after logout
  Resolves: #1469755</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-13" date="1512388800">- fix reauth crash
  Resolves: #1519250</changelog>
</package>
<package pkgid="9bd10b10b3574701f539c185645f5822bb3894335cb734879e442712ab459cf4" name="gdm-devel" arch="i686">
  <version epoch="1" ver="3.22.3" rel="12.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-3" date="1489147200">- Don't fall over if autologin user isn't available
  Resolves #1373837</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-4" date="1489665600">- Drop reference to wayland in config file
- use autosetup to simplify spec maintenance
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-5" date="1489665601">- Attempt to fix po file installation
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-6" date="1490961600">- Fix indirect XDMCP
  Resolves: #1273156</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-7" date="1491220800">- Fix user switching
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.22.3-8" date="1491393600">- Reap transient login screens when they are no longer needed
- Jump to login screen if we end up on a blank VT
  Resolves: #1301028</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-9" date="1493899200">- Make sure reauthentication is run within the user
  session.
  Resolves:#1448209</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-10" date="1494590400">- Add patches to try to maintain some semblance of compatibility
  when live upgrading between 7.3 and 7.4
  Related: #1448786</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-11" date="1496145600">- Add japanese translation
  Resolves: #1449632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-12" date="1499860800">- Ensure X server is dead after logout
  Resolves: #1469755</changelog>
</package>
<package pkgid="90cd531034e9bb60058f5988d62fe780a5fdfa050b2e4cba545cd9c9ca822719" name="gdm-devel" arch="x86_64">
  <version epoch="1" ver="3.22.3" rel="12.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-3" date="1489147200">- Don't fall over if autologin user isn't available
  Resolves #1373837</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-4" date="1489665600">- Drop reference to wayland in config file
- use autosetup to simplify spec maintenance
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-5" date="1489665601">- Attempt to fix po file installation
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-6" date="1490961600">- Fix indirect XDMCP
  Resolves: #1273156</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-7" date="1491220800">- Fix user switching
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.22.3-8" date="1491393600">- Reap transient login screens when they are no longer needed
- Jump to login screen if we end up on a blank VT
  Resolves: #1301028</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-9" date="1493899200">- Make sure reauthentication is run within the user
  session.
  Resolves:#1448209</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-10" date="1494590400">- Add patches to try to maintain some semblance of compatibility
  when live upgrading between 7.3 and 7.4
  Related: #1448786</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-11" date="1496145600">- Add japanese translation
  Resolves: #1449632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-12" date="1499860800">- Ensure X server is dead after logout
  Resolves: #1469755</changelog>
</package>
<package pkgid="43650cceb20c099c12a3decf51a4ec1129d09521c0aad9a2052513494e50e815" name="gdm-devel" arch="i686">
  <version epoch="1" ver="3.22.3" rel="13.el7_4"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-4" date="1489665600">- Drop reference to wayland in config file
- use autosetup to simplify spec maintenance
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-5" date="1489665601">- Attempt to fix po file installation
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-6" date="1490961600">- Fix indirect XDMCP
  Resolves: #1273156</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-7" date="1491220800">- Fix user switching
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.22.3-8" date="1491393600">- Reap transient login screens when they are no longer needed
- Jump to login screen if we end up on a blank VT
  Resolves: #1301028</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-9" date="1493899200">- Make sure reauthentication is run within the user
  session.
  Resolves:#1448209</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-10" date="1494590400">- Add patches to try to maintain some semblance of compatibility
  when live upgrading between 7.3 and 7.4
  Related: #1448786</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-11" date="1496145600">- Add japanese translation
  Resolves: #1449632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-12" date="1499860800">- Ensure X server is dead after logout
  Resolves: #1469755</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-13" date="1512388800">- fix reauth crash
  Resolves: #1519250</changelog>
</package>
<package pkgid="3fe7fecd02c228f35fd988c149448ab0a2e1921b0a2b11831e65168e30dcdc31" name="gdm-devel" arch="x86_64">
  <version epoch="1" ver="3.22.3" rel="13.el7_4"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-4" date="1489665600">- Drop reference to wayland in config file
- use autosetup to simplify spec maintenance
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-5" date="1489665601">- Attempt to fix po file installation
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-6" date="1490961600">- Fix indirect XDMCP
  Resolves: #1273156</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-7" date="1491220800">- Fix user switching
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.22.3-8" date="1491393600">- Reap transient login screens when they are no longer needed
- Jump to login screen if we end up on a blank VT
  Resolves: #1301028</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-9" date="1493899200">- Make sure reauthentication is run within the user
  session.
  Resolves:#1448209</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-10" date="1494590400">- Add patches to try to maintain some semblance of compatibility
  when live upgrading between 7.3 and 7.4
  Related: #1448786</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-11" date="1496145600">- Add japanese translation
  Resolves: #1449632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-12" date="1499860800">- Ensure X server is dead after logout
  Resolves: #1469755</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-13" date="1512388800">- fix reauth crash
  Resolves: #1519250</changelog>
</package>
<package pkgid="a433b7046e993a1fdeb6b359e6a1601237b136804f2caa5ec4ffdbbc90a81535" name="ghostscript" arch="i686">
  <version epoch="0" ver="9.07" rel="28.el7_4.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-21" date="1478174400">- Added security fixes for:
  - CVE-2013-5653 (bug #1380327)
  - CVE-2016-7977 (bug #1380415)
  - CVE-2016-7978 (bug #1382300)
  - CVE-2016-7979 (bug #1382305)
  - CVE-2016-8602 (bug #1383940)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-22" date="1484049600">- Fix of SIGSEGV in cid_font_data_param when using ps2pdf (bug #1390847)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.1" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.2" date="1503403200">- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
</package>
<package pkgid="e4fc42447158c0fd0cd55deefbe6a41aec5f3a66510015562fe53c1c98aa3817" name="ghostscript" arch="src">
  <version epoch="0" ver="9.07" rel="28.el7_4.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-21" date="1478174400">- Added security fixes for:
  - CVE-2013-5653 (bug #1380327)
  - CVE-2016-7977 (bug #1380415)
  - CVE-2016-7978 (bug #1382300)
  - CVE-2016-7979 (bug #1382305)
  - CVE-2016-8602 (bug #1383940)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-22" date="1484049600">- Fix of SIGSEGV in cid_font_data_param when using ps2pdf (bug #1390847)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.1" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.2" date="1503403200">- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
</package>
<package pkgid="307315cb1777ad543f640ab15a1553019182b082d63d40543526a6ce3a95a2a4" name="ghostscript" arch="src">
  <version epoch="0" ver="9.07" rel="28.el7_4.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-21" date="1478174400">- Added security fixes for:
  - CVE-2013-5653 (bug #1380327)
  - CVE-2016-7977 (bug #1380415)
  - CVE-2016-7978 (bug #1382300)
  - CVE-2016-7979 (bug #1382305)
  - CVE-2016-8602 (bug #1383940)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-22" date="1484049600">- Fix of SIGSEGV in cid_font_data_param when using ps2pdf (bug #1390847)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.1" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.2" date="1503403200">- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
</package>
<package pkgid="ec88206ef438c870d3122d8b468330eeb003d2f94357b23794f4b2740ce52826" name="ghostscript" arch="x86_64">
  <version epoch="0" ver="9.07" rel="28.el7_4.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-21" date="1478174400">- Added security fixes for:
  - CVE-2013-5653 (bug #1380327)
  - CVE-2016-7977 (bug #1380415)
  - CVE-2016-7978 (bug #1382300)
  - CVE-2016-7979 (bug #1382305)
  - CVE-2016-8602 (bug #1383940)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-22" date="1484049600">- Fix of SIGSEGV in cid_font_data_param when using ps2pdf (bug #1390847)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.1" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.2" date="1503403200">- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
</package>
<package pkgid="24030f5a840b8721065ff7be4636ce4a28eb9e06cfcc91c0f12318ca785dc7f2" name="ghostscript-cups" arch="i686">
  <version epoch="0" ver="9.07" rel="28.el7_4.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-21" date="1478174400">- Added security fixes for:
  - CVE-2013-5653 (bug #1380327)
  - CVE-2016-7977 (bug #1380415)
  - CVE-2016-7978 (bug #1382300)
  - CVE-2016-7979 (bug #1382305)
  - CVE-2016-8602 (bug #1383940)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-22" date="1484049600">- Fix of SIGSEGV in cid_font_data_param when using ps2pdf (bug #1390847)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.1" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.2" date="1503403200">- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
</package>
<package pkgid="0172a89b3d786454c045e82799d70ee07cddf8bbe882dce9871eda26fbde5f46" name="ghostscript-cups" arch="x86_64">
  <version epoch="0" ver="9.07" rel="28.el7_4.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-21" date="1478174400">- Added security fixes for:
  - CVE-2013-5653 (bug #1380327)
  - CVE-2016-7977 (bug #1380415)
  - CVE-2016-7978 (bug #1382300)
  - CVE-2016-7979 (bug #1382305)
  - CVE-2016-8602 (bug #1383940)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-22" date="1484049600">- Fix of SIGSEGV in cid_font_data_param when using ps2pdf (bug #1390847)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.1" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.2" date="1503403200">- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
</package>
<package pkgid="9fa35024b3977c67191f3f2a3c234f83311180169dcc79879241f1ceed8ee96e" name="ghostscript-debuginfo" arch="i686">
  <version epoch="0" ver="9.07" rel="28.el7_4.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-21" date="1478174400">- Added security fixes for:
  - CVE-2013-5653 (bug #1380327)
  - CVE-2016-7977 (bug #1380415)
  - CVE-2016-7978 (bug #1382300)
  - CVE-2016-7979 (bug #1382305)
  - CVE-2016-8602 (bug #1383940)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-22" date="1484049600">- Fix of SIGSEGV in cid_font_data_param when using ps2pdf (bug #1390847)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.1" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.2" date="1503403200">- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
</package>
<package pkgid="cdcdb2cf4e132cdc650d112c9e37e13e780c54395554a3330242a81c5a9398dd" name="ghostscript-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.07" rel="28.el7_4.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-21" date="1478174400">- Added security fixes for:
  - CVE-2013-5653 (bug #1380327)
  - CVE-2016-7977 (bug #1380415)
  - CVE-2016-7978 (bug #1382300)
  - CVE-2016-7979 (bug #1382305)
  - CVE-2016-8602 (bug #1383940)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-22" date="1484049600">- Fix of SIGSEGV in cid_font_data_param when using ps2pdf (bug #1390847)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.1" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.2" date="1503403200">- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
</package>
<package pkgid="0b09bf0f09bf0b06e779c41b9f529bb3bed049b2bca7edaa7d9ad021fddc84c8" name="ghostscript-devel" arch="i686">
  <version epoch="0" ver="9.07" rel="28.el7_4.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-21" date="1478174400">- Added security fixes for:
  - CVE-2013-5653 (bug #1380327)
  - CVE-2016-7977 (bug #1380415)
  - CVE-2016-7978 (bug #1382300)
  - CVE-2016-7979 (bug #1382305)
  - CVE-2016-8602 (bug #1383940)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-22" date="1484049600">- Fix of SIGSEGV in cid_font_data_param when using ps2pdf (bug #1390847)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.1" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.2" date="1503403200">- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
</package>
<package pkgid="48e4e17493014557b2c28621335e6c03ef6dba32ea0d18679289775c17763550" name="ghostscript-devel" arch="x86_64">
  <version epoch="0" ver="9.07" rel="28.el7_4.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-21" date="1478174400">- Added security fixes for:
  - CVE-2013-5653 (bug #1380327)
  - CVE-2016-7977 (bug #1380415)
  - CVE-2016-7978 (bug #1382300)
  - CVE-2016-7979 (bug #1382305)
  - CVE-2016-8602 (bug #1383940)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-22" date="1484049600">- Fix of SIGSEGV in cid_font_data_param when using ps2pdf (bug #1390847)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.1" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.2" date="1503403200">- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
</package>
<package pkgid="137256ea49b677aa29d4e83ff961e1aa02eb7e60aec7a1cfd97abf9b2dfcaec8" name="ghostscript-doc" arch="noarch">
  <version epoch="0" ver="9.07" rel="28.el7_4.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-21" date="1478174400">- Added security fixes for:
  - CVE-2013-5653 (bug #1380327)
  - CVE-2016-7977 (bug #1380415)
  - CVE-2016-7978 (bug #1382300)
  - CVE-2016-7979 (bug #1382305)
  - CVE-2016-8602 (bug #1383940)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-22" date="1484049600">- Fix of SIGSEGV in cid_font_data_param when using ps2pdf (bug #1390847)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.1" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.2" date="1503403200">- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
</package>
<package pkgid="ca4ecd50699b9f9a97e0d27d3aebcc93f42512c01931012cdb649d18e27fadb7" name="ghostscript-doc" arch="noarch">
  <version epoch="0" ver="9.07" rel="28.el7_4.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-21" date="1478174400">- Added security fixes for:
  - CVE-2013-5653 (bug #1380327)
  - CVE-2016-7977 (bug #1380415)
  - CVE-2016-7978 (bug #1382300)
  - CVE-2016-7979 (bug #1382305)
  - CVE-2016-8602 (bug #1383940)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-22" date="1484049600">- Fix of SIGSEGV in cid_font_data_param when using ps2pdf (bug #1390847)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.1" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.2" date="1503403200">- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
</package>
<package pkgid="2387de78f2486be22289ff88e51ae49baddc6d36a33ab1f9ce89bf9cf8c6fe45" name="ghostscript-gtk" arch="i686">
  <version epoch="0" ver="9.07" rel="28.el7_4.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-21" date="1478174400">- Added security fixes for:
  - CVE-2013-5653 (bug #1380327)
  - CVE-2016-7977 (bug #1380415)
  - CVE-2016-7978 (bug #1382300)
  - CVE-2016-7979 (bug #1382305)
  - CVE-2016-8602 (bug #1383940)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-22" date="1484049600">- Fix of SIGSEGV in cid_font_data_param when using ps2pdf (bug #1390847)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.1" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.2" date="1503403200">- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
</package>
<package pkgid="3757bfee877975bf5b429b9537e480a33d55b28ce28c2379edd0e0b28e53049d" name="ghostscript-gtk" arch="x86_64">
  <version epoch="0" ver="9.07" rel="28.el7_4.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-21" date="1478174400">- Added security fixes for:
  - CVE-2013-5653 (bug #1380327)
  - CVE-2016-7977 (bug #1380415)
  - CVE-2016-7978 (bug #1382300)
  - CVE-2016-7979 (bug #1382305)
  - CVE-2016-8602 (bug #1383940)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-22" date="1484049600">- Fix of SIGSEGV in cid_font_data_param when using ps2pdf (bug #1390847)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.1" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.2" date="1503403200">- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
</package>
<package pkgid="baf33df5597b7de2542d637ecb15d5cb98b37f9c0b800771f0584ae4cefa47a3" name="git" arch="i686">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="9a68f5f45fa9490263e6a2d402ea7d23de844b89c1d336cabb514b3efa6b1396" name="git" arch="src">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="46fdd6c5b8e132668bb7fe7315dda5c1d6cfa1acd68c595059c99edcb8fca2a0" name="git" arch="src">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="29fc79f5356e53b38da6fd11dbf8545f7cd823cae2ad397ed6c5ad818bda3eab" name="git" arch="x86_64">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="61b89563b4f762030b95531a9de664d7eeeaf137b4d1e6c9cbd9e0d66dad4f1e" name="git-all" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="795ef02d633f1d8bc238239b1c196207157a55e69acd002d71199e5399708db2" name="git-all" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="2debcddec6bdabdc92512d45c581a769d23a06054814a80cdde6722e588d2d83" name="git-bzr" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="19b96bbe3890d663140377ddf4353d26a208d7f8a9077945fcae6f0ecaf360cd" name="git-bzr" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="b8a2202f39f6bce97ca022290ab7362bf10492283fefe215cf5575ef38380e0f" name="git-cvs" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="909515bef4e62499585f7e5cf70692a17b33a5d56f46d6a31b02b31d9961343a" name="git-cvs" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="8576b9a5af911f3f565c6dd69cf68ccc0743ec1df72f5f0e0786fb63ce39815f" name="git-daemon" arch="i686">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="533302b26a44948c998932710d676f237df6ef8a1f938b5508ae19a382643c97" name="git-daemon" arch="x86_64">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="66990303e86903e3b5599c801f5d761453d148f3cc2efc2fe548d599e8aba931" name="git-debuginfo" arch="i686">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="df84ae7fb52bc3da29b6d9a25af5e95bb8682ca3d71a66d9dc8af09bad4309ae" name="git-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="45684120d8f133deb265608a07f0f7b49df0a91614622724e48cd3dab6643abc" name="git-email" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="e16ccfda6b1e8c560d304a232c2724ebd702e1136ae1bdf634c1267353199885" name="git-email" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="4e6ed29265fe2fd6e0891b94e8b836d176fddf6ed72822f31c245c1982f7397a" name="git-gui" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="59d27cdb0db8bbeefaa083e2074868ad187b3f4d14986bb31385f213beb0dd8f" name="git-gui" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="541cdd67e81759cc8e81b281d2fb93776dcb03fb57c5601ef52f72ac664d86aa" name="git-hg" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="edd07845f2d78042ed5a7ac226a372eec095c5ed335b9f62081ee7e5248644a1" name="git-hg" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="afd19eeac9073b23acbf5a54bd9f2014a2adba18fecfb509275a0af4819f6700" name="git-p4" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="15182ab61ea8b4fb8c843ed087df0691b8aa2f858f86702ee4efdd7384f1ec2c" name="git-p4" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="5b31f3cdea995aa3bf47227cd8286accfbb39b65d52f054d1dda3a76a791620c" name="git-svn" arch="i686">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="8bd218702deb0b0c3f5d02da731500618186f0d424b1edb061373c5a63556760" name="git-svn" arch="x86_64">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="8499c968b47176fdbee2a7cf3e1fbf9c9ce98308256d7449fa729e5e2e7e84b8" name="gitk" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="bc71d29d89ebe9d615e31e5812903663e6a904dca1d9a56a45e9ede5669f5535" name="gitk" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="ffb0d429029dcfd82fab814452445b7586b3261a8978ef27d7ec006e5f848a60" name="gitweb" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="fe8a3357dfb11110f6949704652fd2428a966085d5f4a13ec797d2c28f4a7bff" name="gitweb" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="1be67b1b4aecb054e98b822223bdfd06955dffc0115451bc10ea67291dabefdf" name="glibc" arch="i686">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="a58fb2f0a68fb35b3e3c2b643cdd2bd42bd44753e5dae9bf7bc2ca0bc4583633" name="glibc" arch="src">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="8982b6c8e09880240d36a76012a3e5be6e16fded9814d1057f43b648c7e02813" name="glibc" arch="src">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="13daa2c11a4dc309c40f0c3f8e835263a219dd47424a6de2d6b8a1d00398e4ec" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="5931889275e9ae7c5f0ef62d6c585aa14916ee6b398da7831464ee3925b37b8b" name="glibc-common" arch="i686">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="a361495949249ff98687063c0dde750d4de61cd29d13c5b5677871bb34560a90" name="glibc-common" arch="x86_64">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="4be1741ca5d86c1ef1c58d0ddb32d0163c5b2b13d9e19dddc29a724bf9ec504f" name="glibc-debuginfo" arch="i686">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="a3deb54192187828677ad1b96540528e991f9b95663cc7b6a468a6eb0c1ad485" name="glibc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="b399c69c0865c73beef2784e4b0c9fb943120e1dbf772d2eacee5b5299cf13bd" name="glibc-debuginfo-common" arch="i686">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="7ea1254be8975791e6896127ad813b8132ac67aacc43be7fa365b662a35fcadf" name="glibc-debuginfo-common" arch="x86_64">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="4f17369827aea58118e11ae58051ada2940fbec055dd292068a9857da8fa7f64" name="glibc-devel" arch="i686">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="027a0e2088a3998b4e6f24750ce52288030444dfda9b85dc62846740dd6432c4" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="07fee7c028da5e5528071e5167e176efbbddefea9a56a25281314585dcc104c5" name="glibc-headers" arch="i686">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="abe77686ec47c39283bdf1a4cbe0d04b1aa31954a4ccccf9405c48542cd53cf9" name="glibc-headers" arch="x86_64">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="fee53de1bfd51039b45778c1db543fd4439da21c3fe0f4c335819e673464adc5" name="glibc-static" arch="i686">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="665e20148133464e00f2a2d8989559c7a2ffdc878eaa713fd47b3cadd31a2bce" name="glibc-static" arch="x86_64">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="f1607e4154da26543e5afaaf86efd14b4c84fbc558e25c3a3af94cb0be628c43" name="glibc-utils" arch="i686">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="2fe63c19ff6c5c7eb7f47b28f58252ceab7ff4380a0b20adecfe6edb2b205f93" name="glibc-utils" arch="x86_64">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="9006b73572978beec9b2c676e2ba2a7dc5248ec0a7874aa49cadbed0db40b728" name="groovy" arch="noarch">
  <version epoch="0" ver="1.8.9" rel="8.el7_4"/>
  <changelog author="Andy Grimm &lt;agrimm@gmail.com&gt; - 1.8.8-3" date="1365422400">- Apply patch for GROOVY-6085 (RHBZ #949352)</changelog>
  <changelog author="Matt Spaulding &lt;mspaulding06@gmail.com&gt; - 1.8.8-4" date="1365681600">- Now accepts classpath argument (RHBZ #810885)</changelog>
  <changelog author="gil cattaneo &lt;puntogil@libero.it&gt; - 1.8.9-1" date="1366459200">- Update to 1.8.9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-2" date="1370520000">- Remove bundled JARs and classes
- Add workaround for rhbz#971483
- Add Public Domain to licenses
- Install ASL 2.0 license text, resolves: rhbz#858257</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 1.8.9-3" date="1370865600">- Fix license tag (+CC-BY)</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-4" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-5" date="1382616000">- Remove desktop files</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.9-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-7" date="1389614400">- Add Requires on java-devel
- Resolves: rhbz#1052291</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-8" date="1499774400">- Fix Information disclosure vulnerability
- Resolves: CVE-2016-6814</changelog>
</package>
<package pkgid="b0325d13a4f46d1fae94d024b3d566af1e138d621526bb99022d8040e3658507" name="groovy" arch="noarch">
  <version epoch="0" ver="1.8.9" rel="8.el7_4"/>
  <changelog author="Andy Grimm &lt;agrimm@gmail.com&gt; - 1.8.8-3" date="1365422400">- Apply patch for GROOVY-6085 (RHBZ #949352)</changelog>
  <changelog author="Matt Spaulding &lt;mspaulding06@gmail.com&gt; - 1.8.8-4" date="1365681600">- Now accepts classpath argument (RHBZ #810885)</changelog>
  <changelog author="gil cattaneo &lt;puntogil@libero.it&gt; - 1.8.9-1" date="1366459200">- Update to 1.8.9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-2" date="1370520000">- Remove bundled JARs and classes
- Add workaround for rhbz#971483
- Add Public Domain to licenses
- Install ASL 2.0 license text, resolves: rhbz#858257</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 1.8.9-3" date="1370865600">- Fix license tag (+CC-BY)</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-4" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-5" date="1382616000">- Remove desktop files</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.9-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-7" date="1389614400">- Add Requires on java-devel
- Resolves: rhbz#1052291</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-8" date="1499774400">- Fix Information disclosure vulnerability
- Resolves: CVE-2016-6814</changelog>
</package>
<package pkgid="12a383e6d606009cdde4c1577231c31f6341c2587f39780e9c5d2cb4fc921ce1" name="groovy" arch="src">
  <version epoch="0" ver="1.8.9" rel="8.el7_4"/>
  <changelog author="Andy Grimm &lt;agrimm@gmail.com&gt; - 1.8.8-3" date="1365422400">- Apply patch for GROOVY-6085 (RHBZ #949352)</changelog>
  <changelog author="Matt Spaulding &lt;mspaulding06@gmail.com&gt; - 1.8.8-4" date="1365681600">- Now accepts classpath argument (RHBZ #810885)</changelog>
  <changelog author="gil cattaneo &lt;puntogil@libero.it&gt; - 1.8.9-1" date="1366459200">- Update to 1.8.9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-2" date="1370520000">- Remove bundled JARs and classes
- Add workaround for rhbz#971483
- Add Public Domain to licenses
- Install ASL 2.0 license text, resolves: rhbz#858257</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 1.8.9-3" date="1370865600">- Fix license tag (+CC-BY)</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-4" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-5" date="1382616000">- Remove desktop files</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.9-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-7" date="1389614400">- Add Requires on java-devel
- Resolves: rhbz#1052291</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-8" date="1499774400">- Fix Information disclosure vulnerability
- Resolves: CVE-2016-6814</changelog>
</package>
<package pkgid="993b8138955936c5d4a62e53317276a70f7c46410a41a6c9e7ed2cbf3cdc43f2" name="groovy" arch="src">
  <version epoch="0" ver="1.8.9" rel="8.el7_4"/>
  <changelog author="Andy Grimm &lt;agrimm@gmail.com&gt; - 1.8.8-3" date="1365422400">- Apply patch for GROOVY-6085 (RHBZ #949352)</changelog>
  <changelog author="Matt Spaulding &lt;mspaulding06@gmail.com&gt; - 1.8.8-4" date="1365681600">- Now accepts classpath argument (RHBZ #810885)</changelog>
  <changelog author="gil cattaneo &lt;puntogil@libero.it&gt; - 1.8.9-1" date="1366459200">- Update to 1.8.9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-2" date="1370520000">- Remove bundled JARs and classes
- Add workaround for rhbz#971483
- Add Public Domain to licenses
- Install ASL 2.0 license text, resolves: rhbz#858257</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 1.8.9-3" date="1370865600">- Fix license tag (+CC-BY)</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-4" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-5" date="1382616000">- Remove desktop files</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.9-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-7" date="1389614400">- Add Requires on java-devel
- Resolves: rhbz#1052291</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-8" date="1499774400">- Fix Information disclosure vulnerability
- Resolves: CVE-2016-6814</changelog>
</package>
<package pkgid="01b5dcc8baf59a5d89905c280269c3204b72da4811467553941dac79ced1e167" name="groovy-javadoc" arch="noarch">
  <version epoch="0" ver="1.8.9" rel="8.el7_4"/>
  <changelog author="Andy Grimm &lt;agrimm@gmail.com&gt; - 1.8.8-3" date="1365422400">- Apply patch for GROOVY-6085 (RHBZ #949352)</changelog>
  <changelog author="Matt Spaulding &lt;mspaulding06@gmail.com&gt; - 1.8.8-4" date="1365681600">- Now accepts classpath argument (RHBZ #810885)</changelog>
  <changelog author="gil cattaneo &lt;puntogil@libero.it&gt; - 1.8.9-1" date="1366459200">- Update to 1.8.9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-2" date="1370520000">- Remove bundled JARs and classes
- Add workaround for rhbz#971483
- Add Public Domain to licenses
- Install ASL 2.0 license text, resolves: rhbz#858257</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 1.8.9-3" date="1370865600">- Fix license tag (+CC-BY)</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-4" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-5" date="1382616000">- Remove desktop files</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.9-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-7" date="1389614400">- Add Requires on java-devel
- Resolves: rhbz#1052291</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-8" date="1499774400">- Fix Information disclosure vulnerability
- Resolves: CVE-2016-6814</changelog>
</package>
<package pkgid="83bc3c13d20acb7da9ab456ad973b0c765cac5ae31cf94c2a3b4fd4de0499720" name="groovy-javadoc" arch="noarch">
  <version epoch="0" ver="1.8.9" rel="8.el7_4"/>
  <changelog author="Andy Grimm &lt;agrimm@gmail.com&gt; - 1.8.8-3" date="1365422400">- Apply patch for GROOVY-6085 (RHBZ #949352)</changelog>
  <changelog author="Matt Spaulding &lt;mspaulding06@gmail.com&gt; - 1.8.8-4" date="1365681600">- Now accepts classpath argument (RHBZ #810885)</changelog>
  <changelog author="gil cattaneo &lt;puntogil@libero.it&gt; - 1.8.9-1" date="1366459200">- Update to 1.8.9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-2" date="1370520000">- Remove bundled JARs and classes
- Add workaround for rhbz#971483
- Add Public Domain to licenses
- Install ASL 2.0 license text, resolves: rhbz#858257</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 1.8.9-3" date="1370865600">- Fix license tag (+CC-BY)</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-4" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-5" date="1382616000">- Remove desktop files</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.9-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-7" date="1389614400">- Add Requires on java-devel
- Resolves: rhbz#1052291</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.9-8" date="1499774400">- Fix Information disclosure vulnerability
- Resolves: CVE-2016-6814</changelog>
</package>
<package pkgid="b4eb870ecc1927f054120678eb73286899e73a293b9143db2222b10606486132" name="grub2" arch="i686">
  <version epoch="1" ver="2.02" rel="0.65.el7.centos.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.65.el7.centos.2" date="1508414400">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 2.02-0.65.el7.centos.2.i386" date="1508760000">- Roll in i686 mods</changelog>
</package>
<package pkgid="93b347b972f6f0b81d4107c983245ec6948fc5b13463b9ebf4535777dd6ab59b" name="grub2" arch="src">
  <version epoch="1" ver="2.02" rel="0.65.el7.centos.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.65.el7.centos.2" date="1508414400">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 2.02-0.65.el7.centos.2.i386" date="1508760000">- Roll in i686 mods</changelog>
</package>
<package pkgid="7232bbeb913a7946602fc571f6947029053fc3f7b58b3f5aee3337f0a8f0ea7f" name="grub2" arch="src">
  <version epoch="1" ver="2.02" rel="0.65.el7.centos.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603200">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.65.el7.centos.2" date="1508414400">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
</package>
<package pkgid="d56dfb30c7c111bd8e8fabd7579ece62ff95db30bea654c7f2f3a2385d43dfd1" name="grub2" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.65.el7.centos.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603200">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.65.el7.centos.2" date="1508414400">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
</package>
<package pkgid="76c982386fb61f1b35ff8481041401a3e4a41857b817852dcf828d3380e9c9ab" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.65.el7.centos.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.65.el7.centos.2" date="1508414400">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 2.02-0.65.el7.centos.2.i386" date="1508760000">- Roll in i686 mods</changelog>
</package>
<package pkgid="15b53732601fd8dd004a79e336be4f84f0cf977d7eb064b41443e9b13d22c122" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.65.el7.centos.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603200">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.65.el7.centos.2" date="1508414400">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
</package>
<package pkgid="3e1ca5602cd282bc0a130c22dc362d0b4470f828b29ca05309020d5dc4e0bdef" name="grub2-debuginfo" arch="i686">
  <version epoch="1" ver="2.02" rel="0.65.el7.centos.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.65.el7.centos.2" date="1508414400">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 2.02-0.65.el7.centos.2.i386" date="1508760000">- Roll in i686 mods</changelog>
</package>
<package pkgid="5325d5b7d1118738010cb82a47acf2e4aee4b09c386e15c5a4a3bc1a1609462c" name="grub2-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.65.el7.centos.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603200">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.65.el7.centos.2" date="1508414400">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
</package>
<package pkgid="e91bf9ba58dcc2bc274a2c736e4260a49cf3df59a79972bdafda38b4d739ec68" name="grub2-efi-ia32" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.65.el7.centos.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603200">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.65.el7.centos.2" date="1508414400">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
</package>
<package pkgid="5f3288bd5562da267b6c86dde2c2073de3036822529a1b6e5ae2ba8c150f6319" name="grub2-efi-ia32-cdboot" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.65.el7.centos.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603200">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.65.el7.centos.2" date="1508414400">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
</package>
<package pkgid="404b86ac3b9f8270968bef99181a1307b95424dfd340884f8ff1e2e2b1b33a3e" name="grub2-efi-ia32-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.65.el7.centos.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603200">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.65.el7.centos.2" date="1508414400">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
</package>
<package pkgid="974b54926d25aea00665871631ee8b09f8ff0b262865a0b865dd025cfbb05968" name="grub2-efi-x64" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.65.el7.centos.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603200">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.65.el7.centos.2" date="1508414400">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
</package>
<package pkgid="d9ef4347f27d4c7e65f4666b8b0590007d64935cdf026e2c79cdd2a64bc99625" name="grub2-efi-x64-cdboot" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.65.el7.centos.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603200">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.65.el7.centos.2" date="1508414400">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
</package>
<package pkgid="7b2b56369572ec9c1753ba12d3b264226d27690eba1d78255c9cabdc6a571b0b" name="grub2-efi-x64-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.65.el7.centos.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603200">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.65.el7.centos.2" date="1508414400">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
</package>
<package pkgid="db530b58a15eebec7b3f805e23c93797caa5685069abed618878ae1439743b16" name="grub2-i386" arch="i686">
  <version epoch="1" ver="2.02" rel="0.65.el7.centos.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.65.el7.centos.2" date="1508414400">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 2.02-0.65.el7.centos.2.i386" date="1508760000">- Roll in i686 mods</changelog>
</package>
<package pkgid="ee7b5aa56d11e0494ed57177438f1437f13dc2e459fcaa880008aa30ed1c4612" name="grub2-i386-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.65.el7.centos.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.65.el7.centos.2" date="1508414400">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 2.02-0.65.el7.centos.2.i386" date="1508760000">- Roll in i686 mods</changelog>
</package>
<package pkgid="9c01d9c9e3a072241772e339a982c30e39fde138fd9102d5303db7c6a1935e43" name="grub2-pc" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.65.el7.centos.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603200">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.65.el7.centos.2" date="1508414400">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
</package>
<package pkgid="1ca7474fa44728781ff5e28f8e05e54439b3ce297020539cf40e3cb3b05801d8" name="grub2-pc-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.65.el7.centos.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603200">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.65.el7.centos.2" date="1508414400">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
</package>
<package pkgid="2604a9525901b9dc0a388501ed8c7597863890f3ad346d621560a6f5538d4ca6" name="grub2-tools" arch="i686">
  <version epoch="1" ver="2.02" rel="0.65.el7.centos.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.65.el7.centos.2" date="1508414400">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 2.02-0.65.el7.centos.2.i386" date="1508760000">- Roll in i686 mods</changelog>
</package>
<package pkgid="64517e7fe64ac0eeb1e54c938f9d34d1eb71e491a14feae31ad5daad8bc3f392" name="grub2-tools" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.65.el7.centos.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603200">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.65.el7.centos.2" date="1508414400">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
</package>
<package pkgid="6a604522b7acd8de3c740d90124d0feda641c2678af88b832d50d08df2e3f124" name="grub2-tools-extra" arch="i686">
  <version epoch="1" ver="2.02" rel="0.65.el7.centos.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.65.el7.centos.2" date="1508414400">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 2.02-0.65.el7.centos.2.i386" date="1508760000">- Roll in i686 mods</changelog>
</package>
<package pkgid="4ca2b1d4983da7f057ac8a7ca43b953242cbe2497eccc7aac428a85559540e63" name="grub2-tools-extra" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.65.el7.centos.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603200">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.65.el7.centos.2" date="1508414400">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
</package>
<package pkgid="77ccdd105581b13c9a516f32ac62bc062d373f2ec2d510af796f42ade9172536" name="grub2-tools-minimal" arch="i686">
  <version epoch="1" ver="2.02" rel="0.65.el7.centos.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.65.el7.centos.2" date="1508414400">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 2.02-0.65.el7.centos.2.i386" date="1508760000">- Roll in i686 mods</changelog>
</package>
<package pkgid="b26b726892087924a6387fed8d5145a5508468ad256cab1b8518d136732f4038" name="grub2-tools-minimal" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.65.el7.centos.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603200">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.02-0.65.el7.centos.2" date="1508414400">- Roll in CentOS Secureboot keys
- Move the edidir to be CentOS, so people can co-install fedora, rhel and centos</changelog>
</package>
<package pkgid="c952c813bc4244d9a034d0ac684ef6158b4419936e388d2a8357a51dbbc73569" name="gtk-update-icon-cache" arch="i686">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="8ebd0e35809d0de71fb80df487056283dcbc7de08c916c507774bb2b8b982c6a" name="gtk-update-icon-cache" arch="x86_64">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="f111de891ff193186b0d33c06f73a815115cbca609feb6d75129e3ca3cd5abec" name="gtk3" arch="i686">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="72de3f99c86f87f5b49eb19cc10a85855f437685d2076c237e7a718ad201ddcd" name="gtk3" arch="src">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="a944e07758836094e31b4be30faf1b9b836d5bfacaa214e8b8e1d7f6e2fe60cd" name="gtk3" arch="src">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="a2b651d809e333b69295701a4a76214b132d8ecd9199781d150972abe2ad6ab0" name="gtk3" arch="x86_64">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="fd0ac0f5d5844cf43da6ef3af8668544629844cfce15cffe8f5ba7c93dcdefe8" name="gtk3-debuginfo" arch="i686">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="7fb902dc34a0ad5e9575d6e9ee7109e01076197c2b79597f7a1228c9bd181518" name="gtk3-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="cea85d05e153ccafc70ec37471e607eed316c57d4ec2f3928997e3bcdf8c4a5f" name="gtk3-devel" arch="i686">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="af934779eeb139c0ad966db22d0519c9156bdf3055b414d213f85d4acad3bd3d" name="gtk3-devel" arch="x86_64">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="67be4d9ffab14385494f19084f77d3a9dcc46a6f2c016e2c890ae7e04e4d187e" name="gtk3-devel-docs" arch="i686">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="8f00dd25d1cc42908e56125d0b53c2ec8b4be15df2be4e8c60bc55dd1352d917" name="gtk3-devel-docs" arch="x86_64">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="edcbc8f60865c34c044dc2eb60d044154bf22aef33b46dc275e6c18f1cf90c41" name="gtk3-immodule-xim" arch="i686">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="da919902cdada1169f56187e94e8c81a11763d8babe5a58343b77c07039cea16" name="gtk3-immodule-xim" arch="x86_64">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="1614037e8c21151de10c39ab418f6b3742372de642568a2c7c0a4c02cb502a36" name="gtk3-immodules" arch="i686">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="06c001298941965c44f5d520d7fdc8f34e1715289959c65d14058574820995da" name="gtk3-immodules" arch="x86_64">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="db9229e4a3445490cbea5e5fc0db3b5c5a70df04244dbb3410c984b495ed9824" name="gtk3-tests" arch="i686">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="4788a15fe8d5247293bd30b7398e517725f6e4bfc5e2e7781f9ba9df4bd26da1" name="gtk3-tests" arch="x86_64">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="755d2ac042091d340d49d6a783f1d4beea33c0a64577160617a199136083a5fc" name="http-parser" arch="i686">
  <version epoch="0" ver="2.7.1" rel="5.el7_4"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 2.7.1-1" date="1485950400">- Import spec file and patches from latest fc25 package
  Resolves: rhbz#1393819</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 2.7.1-5" date="1502366400">- Bump http-parser release number to avoid people pulling EPEL package instead
  of RHEL package
  Resolves: rhbz#1480321</changelog>
</package>
<package pkgid="01942d66435790b2b39de1c6ba123747589818d42a1e20b52ba5d61d78600a5e" name="http-parser" arch="src">
  <version epoch="0" ver="2.7.1" rel="5.el7_4"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 2.7.1-1" date="1485950400">- Import spec file and patches from latest fc25 package
  Resolves: rhbz#1393819</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 2.7.1-5" date="1502366400">- Bump http-parser release number to avoid people pulling EPEL package instead
  of RHEL package
  Resolves: rhbz#1480321</changelog>
</package>
<package pkgid="72cf16e8fe0635962a7300ba1171a0999ba56f742cfb7b2037941afc9b67c97e" name="http-parser" arch="src">
  <version epoch="0" ver="2.7.1" rel="5.el7_4"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 2.7.1-1" date="1485950400">- Import spec file and patches from latest fc25 package
  Resolves: rhbz#1393819</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 2.7.1-5" date="1502366400">- Bump http-parser release number to avoid people pulling EPEL package instead
  of RHEL package
  Resolves: rhbz#1480321</changelog>
</package>
<package pkgid="cd9a1c5cea3141f38da1f85d47d55512dc0fcc35f8fe3e25b66e20771761da38" name="http-parser" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="5.el7_4"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 2.7.1-1" date="1485950400">- Import spec file and patches from latest fc25 package
  Resolves: rhbz#1393819</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 2.7.1-5" date="1502366400">- Bump http-parser release number to avoid people pulling EPEL package instead
  of RHEL package
  Resolves: rhbz#1480321</changelog>
</package>
<package pkgid="89244f0fe3a4c6d28171115b912653b80c499e7974c88eb316184fbe76e96300" name="http-parser-debuginfo" arch="i686">
  <version epoch="0" ver="2.7.1" rel="5.el7_4"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 2.7.1-1" date="1485950400">- Import spec file and patches from latest fc25 package
  Resolves: rhbz#1393819</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 2.7.1-5" date="1502366400">- Bump http-parser release number to avoid people pulling EPEL package instead
  of RHEL package
  Resolves: rhbz#1480321</changelog>
</package>
<package pkgid="daf72dc6ad3656507582e6e37884374696ed3ffc4df76bbad7f7b33841ec8990" name="http-parser-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="5.el7_4"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 2.7.1-1" date="1485950400">- Import spec file and patches from latest fc25 package
  Resolves: rhbz#1393819</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 2.7.1-5" date="1502366400">- Bump http-parser release number to avoid people pulling EPEL package instead
  of RHEL package
  Resolves: rhbz#1480321</changelog>
</package>
<package pkgid="532fd1ab2a7e0fae44d77932eba868a995cc83d67cb3c01869b92196abd7422b" name="http-parser-devel" arch="i686">
  <version epoch="0" ver="2.7.1" rel="5.el7_4"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 2.7.1-1" date="1485950400">- Import spec file and patches from latest fc25 package
  Resolves: rhbz#1393819</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 2.7.1-5" date="1502366400">- Bump http-parser release number to avoid people pulling EPEL package instead
  of RHEL package
  Resolves: rhbz#1480321</changelog>
</package>
<package pkgid="ced5f3a430d3ee065a4992eea55e5b9e0f22cf3e46639a932270e32869eb7da2" name="http-parser-devel" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="5.el7_4"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 2.7.1-1" date="1485950400">- Import spec file and patches from latest fc25 package
  Resolves: rhbz#1393819</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 2.7.1-5" date="1502366400">- Bump http-parser release number to avoid people pulling EPEL package instead
  of RHEL package
  Resolves: rhbz#1480321</changelog>
</package>
<package pkgid="209076e01ecd5d63aacc68e564b2cf0005490e75881633f58a49f09c85d294ef" name="httpd" arch="i686">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.2" date="1502798400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="48de47c8f5f2dfc76a1ddcaff2d13c7cc67c59b4644df2e61ca8ed5b4cc49ae8" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.2" date="1502798400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="2d6418b6f0f63e74baa7635bb72fd5bd9f6bc62a53487ab329cc87f78b40a8ae" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.2" date="1502798400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="5ef1d17665abe3c9dbd9874e4c89ddfb789ab2546bcadae1a100bf31d9ef551f" name="httpd" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.2" date="1502798400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="4309271c5be8c61a7aea1234cefda213a3e37540347f693bb9ff665681533851" name="httpd" arch="i686">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.5" date="1507723200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="e02d43e15f3db8d4a00d0747d3721abb44fc26d298fae7b89fc96ac4b303ed2b" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.5" date="1507723200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="f7d2b8cdd264ab056ce8faca081da643c97b0ff6ffb7133399a0df7398e338c9" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.5" date="1507723200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="7c04a52ad960264df5832e2f11ce4d3e5f69e493f4d17aa7f61b2ff81ed3528a" name="httpd" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.5" date="1507723200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="b9f38146e508aa2e53157dd1987cf22eda8790d25b74baaaf3c9a5095e1c6524" name="httpd" arch="i686">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579200">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.6" date="1508414400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="318d0f72bdc6701594ef6ed37503a41f0f12b0c2c30719308cb27f898e827c04" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579200">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.6" date="1508414400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="bbc08351c233bb49314108b2383b1367586f379999e2be93953bff8e940bf902" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579200">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.6" date="1508414400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="435a643dee9ea287262faa6641e0f3a23e91852fda1a70bf322af6e874cd100c" name="httpd" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579200">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.6" date="1508414400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="e27f55e81599cf23cb8f844b4271d01943ef7ecd193b8a5e231aa580e17b6006" name="httpd-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.2" date="1502798400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="630b46bc0dd212e4da4caa80db1c098ad1a201935fba5968ebfa25a7b11bfed3" name="httpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.2" date="1502798400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="c09cbe0a51b5a2b34241036c1110db55a91a5dc1b6bb3f30d80b45c9f6fd410f" name="httpd-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.5" date="1507723200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="a9b1891f892ceb716c6ab48d8fbb4a0566e15119371ad85ac0c0cd68273e299e" name="httpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.5" date="1507723200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="a67d9488b102c72634b651378ca381074ab5d7aebc3f9e09199edcb3f80692ce" name="httpd-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579200">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.6" date="1508414400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="82545d3419cc9afb6b2ba66afa12ad8ba49c3e967ad3941ce0ea126bc42dc670" name="httpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579200">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.6" date="1508414400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="a71c0b903d312a282e666f07ac5c40a405b70b1e0105bd5cd26b135af1c1aed9" name="httpd-devel" arch="i686">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.2" date="1502798400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="6357eca083e47ac0eeb9307ee5b1120bebee391022caaec2a07ae66dae068f7e" name="httpd-devel" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.2" date="1502798400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="a9ba59dba170021e6c0377a38668278b81fe8df809374398c4cec7ed8bf1d1a4" name="httpd-devel" arch="i686">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.5" date="1507723200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="fa4a7c1fce549df7ce56479335eb84c7cccf261df0e99f39178794f4f62418c5" name="httpd-devel" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.5" date="1507723200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="ce74e2faa8c7c061d6e75d29013931d83d5204c975e3ff2d6f7e8912d4d0372f" name="httpd-devel" arch="i686">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579200">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.6" date="1508414400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="39860d9b1b85b0a9ac4cbe2f09bb945fbe6f31eec39f36d9ad4a76c70e12f6c7" name="httpd-devel" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579200">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.6" date="1508414400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="97373058b5bb36f41fa1bd536364f42356ad5f04c43d606e49774661792c5456" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.2" date="1502798400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="693f3a339c75a5ee7280c8c3366f41f0b9d80187b1ab13fcc2c8c5e6da830fd0" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.2" date="1502798400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="f3eb0546efea8c25032fefc06e55467750b00edd7d396903dd19a1e67b4d5de7" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.5" date="1507723200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="e652e84b7ad1d99bfc87d0ef1be3b39a6abd83a387436c0744fca334b2427a3a" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.5" date="1507723200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="00dfe23b3c3eb018152a162dabebb1408a8373ccd9fc0a76ca6e5276662015fd" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579200">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.6" date="1508414400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="854c59871c370371e4dad1e4013c6e9c674fe53ee32b19d780ebf9e1bf092c00" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579200">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.6" date="1508414400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="a86d546c3983e4d0af73f786e4ef7e1e47d80665874bebaa0e30103bf80db2ce" name="httpd-tools" arch="i686">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.2" date="1502798400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="9f8c8b9f37ebbb0532afbeb3c2964302d9c9886c702d82ece59bdd4ea56426f9" name="httpd-tools" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.2" date="1502798400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="209938133aa0e9e7a43d34b83baacd95fd659ec87cfa17f01036d57184c7b567" name="httpd-tools" arch="i686">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.5" date="1507723200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="060f5943cd2241a86b16d368c472ed2863bed9cf615976947f39abbba929b740" name="httpd-tools" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.5" date="1507723200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="e5814efe20642645c96b9a36ef97b0f0a8ee8bb1bffcfa18a9c57c769366b045" name="httpd-tools" arch="i686">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579200">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.6" date="1508414400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="10fc50e9fead091c6c423bdaa7ee56f1747f63cc62dbdc7da5ed57eae2b048ff" name="httpd-tools" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579200">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.6" date="1508414400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="ddd2e2f12185e04efed61e8dab712e648cb117cdfc7349b22276fdc4f7c4f29d" name="initscripts" arch="i686">
  <version epoch="0" ver="9.49.39" rel="1.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.31-1" date="1465819200">- ipv6: wait for all global IPv6 addresses to leave the "tentative" state
- source_config: tell NetworkManger to load ifcfg file even for NM_CONTROLLED=no
- ifup-aliases: inherit ARPCHECK from parent device
- rhel-dmesg: don't start in containers
- ifup-eth: fix typo in error message (#1038776)
- sysctl.conf: steal comments about /usr,/etc,... from fedora's sysctl.conf
- rwtab: /var/lib/nfs needs to copy the files
- functions: improve killing loops
- ipcalc: detect invalid mask
- ifup: set valid_lft and preferred_lft to forever for static ip
- service: use systemd mangle for given service
- ifup-post: check resolve.conf also with DNS2
- ifdown-post: remove resolv.conf only in specific cases
- spec: ghost /var/log/dmesg
- network-functions: is_available_wait should wait even in the case that is_available returns 2
- autorelabel: turn quota off before relabeling
- autorelabel: call dracut-initramfs-restore before forced reboot</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.32-1" date="1466683200">- ifup-eth: fix setting preferred_lft and valid_lft</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.33-1" date="1468497600">- network: run after network-pre.target</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.34-1" date="1468584000">- import-state: restore also sensitivity part of SELinux context</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.35-1" date="1470139200">- functions: systemctl show now returns an error when unit does not exist</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.36-1" date="1473422400">- import-state: copy just some attributes</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.37-1" date="1473681600">- rhel-import-state: fix broken order of parameters</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.38-1" date="1490875200">- ifdown-eth: we need to flush global scope as well
- killproc/status: add missing '-b &lt;binary&gt;' option
- specfile: mark 'rwtab' and 'statetab' as config files
- spec: we need newer lvm
- rwtab: add /var/lib/systemd/timers
- ifup-eth: remove quote marks
- 9.70-sync: Move everything to github
- 9.70-sync: rwtab updated
- 9.70-sync: service file updated
- 9.70-sync: syconfig.txt updated
- 9.70-sync: systemd/rhel-import-state updated
- 9.70-sync: sysconfig/network-scripts/* updated - part 2
- 9.70-sync: sysconfig/network-scripts/* updated - part 1
- 9.70-sync: rc.d/init.d/network updated
- 9.70-sync: rc.d/init.d/netconsole updated
- 9.70-sync: rc.d/init.d/functions updated
- 9.70-sync: ipv6-6to4.howto example updated
- 9.70-sync: examples/networking/ifcfg-bridge updated
- network: load NetworkManager connection via dbus
- network: check for running NetworkManager via dbus</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1" date="1493812800">- sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
- DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
- re-add missing $HOSTNAME initialization
- ifup: add support for VLAN_EGRESS_PRIORITY_MAP
- rhel-autorelabel: synchronize cached writes before reboot</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1.el7_4.1" date="1509710400">- ARUPDATE option introduced</changelog>
</package>
<package pkgid="3159208f1cfe99448c01a3d6817f43550b2fbf9db391c67bc70cb8b08b514548" name="initscripts" arch="src">
  <version epoch="0" ver="9.49.39" rel="1.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.31-1" date="1465819200">- ipv6: wait for all global IPv6 addresses to leave the "tentative" state
- source_config: tell NetworkManger to load ifcfg file even for NM_CONTROLLED=no
- ifup-aliases: inherit ARPCHECK from parent device
- rhel-dmesg: don't start in containers
- ifup-eth: fix typo in error message (#1038776)
- sysctl.conf: steal comments about /usr,/etc,... from fedora's sysctl.conf
- rwtab: /var/lib/nfs needs to copy the files
- functions: improve killing loops
- ipcalc: detect invalid mask
- ifup: set valid_lft and preferred_lft to forever for static ip
- service: use systemd mangle for given service
- ifup-post: check resolve.conf also with DNS2
- ifdown-post: remove resolv.conf only in specific cases
- spec: ghost /var/log/dmesg
- network-functions: is_available_wait should wait even in the case that is_available returns 2
- autorelabel: turn quota off before relabeling
- autorelabel: call dracut-initramfs-restore before forced reboot</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.32-1" date="1466683200">- ifup-eth: fix setting preferred_lft and valid_lft</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.33-1" date="1468497600">- network: run after network-pre.target</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.34-1" date="1468584000">- import-state: restore also sensitivity part of SELinux context</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.35-1" date="1470139200">- functions: systemctl show now returns an error when unit does not exist</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.36-1" date="1473422400">- import-state: copy just some attributes</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.37-1" date="1473681600">- rhel-import-state: fix broken order of parameters</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.38-1" date="1490875200">- ifdown-eth: we need to flush global scope as well
- killproc/status: add missing '-b &lt;binary&gt;' option
- specfile: mark 'rwtab' and 'statetab' as config files
- spec: we need newer lvm
- rwtab: add /var/lib/systemd/timers
- ifup-eth: remove quote marks
- 9.70-sync: Move everything to github
- 9.70-sync: rwtab updated
- 9.70-sync: service file updated
- 9.70-sync: syconfig.txt updated
- 9.70-sync: systemd/rhel-import-state updated
- 9.70-sync: sysconfig/network-scripts/* updated - part 2
- 9.70-sync: sysconfig/network-scripts/* updated - part 1
- 9.70-sync: rc.d/init.d/network updated
- 9.70-sync: rc.d/init.d/netconsole updated
- 9.70-sync: rc.d/init.d/functions updated
- 9.70-sync: ipv6-6to4.howto example updated
- 9.70-sync: examples/networking/ifcfg-bridge updated
- network: load NetworkManager connection via dbus
- network: check for running NetworkManager via dbus</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1" date="1493812800">- sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
- DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
- re-add missing $HOSTNAME initialization
- ifup: add support for VLAN_EGRESS_PRIORITY_MAP
- rhel-autorelabel: synchronize cached writes before reboot</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1.el7_4.1" date="1509710400">- ARUPDATE option introduced</changelog>
</package>
<package pkgid="03072972f5e270954ab1ad1dc07349de8e418033f99a549afb9b015c0559cf02" name="initscripts" arch="src">
  <version epoch="0" ver="9.49.39" rel="1.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.31-1" date="1465819200">- ipv6: wait for all global IPv6 addresses to leave the "tentative" state
- source_config: tell NetworkManger to load ifcfg file even for NM_CONTROLLED=no
- ifup-aliases: inherit ARPCHECK from parent device
- rhel-dmesg: don't start in containers
- ifup-eth: fix typo in error message (#1038776)
- sysctl.conf: steal comments about /usr,/etc,... from fedora's sysctl.conf
- rwtab: /var/lib/nfs needs to copy the files
- functions: improve killing loops
- ipcalc: detect invalid mask
- ifup: set valid_lft and preferred_lft to forever for static ip
- service: use systemd mangle for given service
- ifup-post: check resolve.conf also with DNS2
- ifdown-post: remove resolv.conf only in specific cases
- spec: ghost /var/log/dmesg
- network-functions: is_available_wait should wait even in the case that is_available returns 2
- autorelabel: turn quota off before relabeling
- autorelabel: call dracut-initramfs-restore before forced reboot</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.32-1" date="1466683200">- ifup-eth: fix setting preferred_lft and valid_lft</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.33-1" date="1468497600">- network: run after network-pre.target</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.34-1" date="1468584000">- import-state: restore also sensitivity part of SELinux context</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.35-1" date="1470139200">- functions: systemctl show now returns an error when unit does not exist</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.36-1" date="1473422400">- import-state: copy just some attributes</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.37-1" date="1473681600">- rhel-import-state: fix broken order of parameters</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.38-1" date="1490875200">- ifdown-eth: we need to flush global scope as well
- killproc/status: add missing '-b &lt;binary&gt;' option
- specfile: mark 'rwtab' and 'statetab' as config files
- spec: we need newer lvm
- rwtab: add /var/lib/systemd/timers
- ifup-eth: remove quote marks
- 9.70-sync: Move everything to github
- 9.70-sync: rwtab updated
- 9.70-sync: service file updated
- 9.70-sync: syconfig.txt updated
- 9.70-sync: systemd/rhel-import-state updated
- 9.70-sync: sysconfig/network-scripts/* updated - part 2
- 9.70-sync: sysconfig/network-scripts/* updated - part 1
- 9.70-sync: rc.d/init.d/network updated
- 9.70-sync: rc.d/init.d/netconsole updated
- 9.70-sync: rc.d/init.d/functions updated
- 9.70-sync: ipv6-6to4.howto example updated
- 9.70-sync: examples/networking/ifcfg-bridge updated
- network: load NetworkManager connection via dbus
- network: check for running NetworkManager via dbus</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1" date="1493812800">- sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
- DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
- re-add missing $HOSTNAME initialization
- ifup: add support for VLAN_EGRESS_PRIORITY_MAP
- rhel-autorelabel: synchronize cached writes before reboot</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1.el7_4.1" date="1509710400">- ARUPDATE option introduced</changelog>
</package>
<package pkgid="3e616a24d88db3aa1bd7a8fa8259765ec5b680f9657ecbd81fa48cee651084c4" name="initscripts" arch="x86_64">
  <version epoch="0" ver="9.49.39" rel="1.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.31-1" date="1465819200">- ipv6: wait for all global IPv6 addresses to leave the "tentative" state
- source_config: tell NetworkManger to load ifcfg file even for NM_CONTROLLED=no
- ifup-aliases: inherit ARPCHECK from parent device
- rhel-dmesg: don't start in containers
- ifup-eth: fix typo in error message (#1038776)
- sysctl.conf: steal comments about /usr,/etc,... from fedora's sysctl.conf
- rwtab: /var/lib/nfs needs to copy the files
- functions: improve killing loops
- ipcalc: detect invalid mask
- ifup: set valid_lft and preferred_lft to forever for static ip
- service: use systemd mangle for given service
- ifup-post: check resolve.conf also with DNS2
- ifdown-post: remove resolv.conf only in specific cases
- spec: ghost /var/log/dmesg
- network-functions: is_available_wait should wait even in the case that is_available returns 2
- autorelabel: turn quota off before relabeling
- autorelabel: call dracut-initramfs-restore before forced reboot</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.32-1" date="1466683200">- ifup-eth: fix setting preferred_lft and valid_lft</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.33-1" date="1468497600">- network: run after network-pre.target</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.34-1" date="1468584000">- import-state: restore also sensitivity part of SELinux context</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.35-1" date="1470139200">- functions: systemctl show now returns an error when unit does not exist</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.36-1" date="1473422400">- import-state: copy just some attributes</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.37-1" date="1473681600">- rhel-import-state: fix broken order of parameters</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.38-1" date="1490875200">- ifdown-eth: we need to flush global scope as well
- killproc/status: add missing '-b &lt;binary&gt;' option
- specfile: mark 'rwtab' and 'statetab' as config files
- spec: we need newer lvm
- rwtab: add /var/lib/systemd/timers
- ifup-eth: remove quote marks
- 9.70-sync: Move everything to github
- 9.70-sync: rwtab updated
- 9.70-sync: service file updated
- 9.70-sync: syconfig.txt updated
- 9.70-sync: systemd/rhel-import-state updated
- 9.70-sync: sysconfig/network-scripts/* updated - part 2
- 9.70-sync: sysconfig/network-scripts/* updated - part 1
- 9.70-sync: rc.d/init.d/network updated
- 9.70-sync: rc.d/init.d/netconsole updated
- 9.70-sync: rc.d/init.d/functions updated
- 9.70-sync: ipv6-6to4.howto example updated
- 9.70-sync: examples/networking/ifcfg-bridge updated
- network: load NetworkManager connection via dbus
- network: check for running NetworkManager via dbus</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1" date="1493812800">- sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
- DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
- re-add missing $HOSTNAME initialization
- ifup: add support for VLAN_EGRESS_PRIORITY_MAP
- rhel-autorelabel: synchronize cached writes before reboot</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1.el7_4.1" date="1509710400">- ARUPDATE option introduced</changelog>
</package>
<package pkgid="10a5b105cbdd4c00e9e95ca4cbca18c4baf9fc3644916463a4abaed4e105c7cd" name="initscripts-debuginfo" arch="i686">
  <version epoch="0" ver="9.49.39" rel="1.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.31-1" date="1465819200">- ipv6: wait for all global IPv6 addresses to leave the "tentative" state
- source_config: tell NetworkManger to load ifcfg file even for NM_CONTROLLED=no
- ifup-aliases: inherit ARPCHECK from parent device
- rhel-dmesg: don't start in containers
- ifup-eth: fix typo in error message (#1038776)
- sysctl.conf: steal comments about /usr,/etc,... from fedora's sysctl.conf
- rwtab: /var/lib/nfs needs to copy the files
- functions: improve killing loops
- ipcalc: detect invalid mask
- ifup: set valid_lft and preferred_lft to forever for static ip
- service: use systemd mangle for given service
- ifup-post: check resolve.conf also with DNS2
- ifdown-post: remove resolv.conf only in specific cases
- spec: ghost /var/log/dmesg
- network-functions: is_available_wait should wait even in the case that is_available returns 2
- autorelabel: turn quota off before relabeling
- autorelabel: call dracut-initramfs-restore before forced reboot</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.32-1" date="1466683200">- ifup-eth: fix setting preferred_lft and valid_lft</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.33-1" date="1468497600">- network: run after network-pre.target</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.34-1" date="1468584000">- import-state: restore also sensitivity part of SELinux context</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.35-1" date="1470139200">- functions: systemctl show now returns an error when unit does not exist</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.36-1" date="1473422400">- import-state: copy just some attributes</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.37-1" date="1473681600">- rhel-import-state: fix broken order of parameters</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.38-1" date="1490875200">- ifdown-eth: we need to flush global scope as well
- killproc/status: add missing '-b &lt;binary&gt;' option
- specfile: mark 'rwtab' and 'statetab' as config files
- spec: we need newer lvm
- rwtab: add /var/lib/systemd/timers
- ifup-eth: remove quote marks
- 9.70-sync: Move everything to github
- 9.70-sync: rwtab updated
- 9.70-sync: service file updated
- 9.70-sync: syconfig.txt updated
- 9.70-sync: systemd/rhel-import-state updated
- 9.70-sync: sysconfig/network-scripts/* updated - part 2
- 9.70-sync: sysconfig/network-scripts/* updated - part 1
- 9.70-sync: rc.d/init.d/network updated
- 9.70-sync: rc.d/init.d/netconsole updated
- 9.70-sync: rc.d/init.d/functions updated
- 9.70-sync: ipv6-6to4.howto example updated
- 9.70-sync: examples/networking/ifcfg-bridge updated
- network: load NetworkManager connection via dbus
- network: check for running NetworkManager via dbus</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1" date="1493812800">- sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
- DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
- re-add missing $HOSTNAME initialization
- ifup: add support for VLAN_EGRESS_PRIORITY_MAP
- rhel-autorelabel: synchronize cached writes before reboot</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1.el7_4.1" date="1509710400">- ARUPDATE option introduced</changelog>
</package>
<package pkgid="6b1ae92e801f39545d01f480f6423921a5f8c50bc1dfbb239d578b80cef3eafe" name="initscripts-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.49.39" rel="1.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.31-1" date="1465819200">- ipv6: wait for all global IPv6 addresses to leave the "tentative" state
- source_config: tell NetworkManger to load ifcfg file even for NM_CONTROLLED=no
- ifup-aliases: inherit ARPCHECK from parent device
- rhel-dmesg: don't start in containers
- ifup-eth: fix typo in error message (#1038776)
- sysctl.conf: steal comments about /usr,/etc,... from fedora's sysctl.conf
- rwtab: /var/lib/nfs needs to copy the files
- functions: improve killing loops
- ipcalc: detect invalid mask
- ifup: set valid_lft and preferred_lft to forever for static ip
- service: use systemd mangle for given service
- ifup-post: check resolve.conf also with DNS2
- ifdown-post: remove resolv.conf only in specific cases
- spec: ghost /var/log/dmesg
- network-functions: is_available_wait should wait even in the case that is_available returns 2
- autorelabel: turn quota off before relabeling
- autorelabel: call dracut-initramfs-restore before forced reboot</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.32-1" date="1466683200">- ifup-eth: fix setting preferred_lft and valid_lft</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.33-1" date="1468497600">- network: run after network-pre.target</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.34-1" date="1468584000">- import-state: restore also sensitivity part of SELinux context</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.35-1" date="1470139200">- functions: systemctl show now returns an error when unit does not exist</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.36-1" date="1473422400">- import-state: copy just some attributes</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.37-1" date="1473681600">- rhel-import-state: fix broken order of parameters</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.38-1" date="1490875200">- ifdown-eth: we need to flush global scope as well
- killproc/status: add missing '-b &lt;binary&gt;' option
- specfile: mark 'rwtab' and 'statetab' as config files
- spec: we need newer lvm
- rwtab: add /var/lib/systemd/timers
- ifup-eth: remove quote marks
- 9.70-sync: Move everything to github
- 9.70-sync: rwtab updated
- 9.70-sync: service file updated
- 9.70-sync: syconfig.txt updated
- 9.70-sync: systemd/rhel-import-state updated
- 9.70-sync: sysconfig/network-scripts/* updated - part 2
- 9.70-sync: sysconfig/network-scripts/* updated - part 1
- 9.70-sync: rc.d/init.d/network updated
- 9.70-sync: rc.d/init.d/netconsole updated
- 9.70-sync: rc.d/init.d/functions updated
- 9.70-sync: ipv6-6to4.howto example updated
- 9.70-sync: examples/networking/ifcfg-bridge updated
- network: load NetworkManager connection via dbus
- network: check for running NetworkManager via dbus</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1" date="1493812800">- sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
- DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
- re-add missing $HOSTNAME initialization
- ifup: add support for VLAN_EGRESS_PRIORITY_MAP
- rhel-autorelabel: synchronize cached writes before reboot</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1.el7_4.1" date="1509710400">- ARUPDATE option introduced</changelog>
</package>
<package pkgid="85eb1e2123cca6b76d0f1764f50138ae06afdf4121660db25bb5d540a41ed8d2" name="ipa" arch="src">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504612800">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504699200">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="08e3abf841bdec40a106c368b4ba6c7e02dd471b83e18062838d8133682b456f" name="ipa" arch="src">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504612800">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504699200">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="6e1ea1a0ff6ed9ee7c472ff9f12d45d281e657b9d8b5e240bdcd4cb3a62c1c37" name="ipa" arch="src">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414400">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414401">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="676c4c4682f6591d5a1939330c4f5da2301ce6d9265b7b055d0e56cc78403c92" name="ipa" arch="src">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414400">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414401">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="08fbe512c749e70dc91c58f9872a553e5aa825cc4d8c03478c12220cd98a8b5a" name="ipa" arch="src">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-13.el7" date="1495108800">- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
  error observed during ipa upgrade with latest package. 
  - ipa-server-install: fix uninstall
- Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
  replica 
  - ca install: merge duplicated code for DM password
  - installutils: add DM password validator
  - ca, kra install: validate DM password</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-14.el7" date="1495627200">- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
  handle PKINIT certificates/anchors
  - certdb: add named trust flag constants
  - certdb, certs: make trust flags argument mandatory
  - certdb: use custom object for trust flags
  - install: trust IPA CA for PKINIT
  - client install: fix client PKINIT configuration
  - install: introduce generic Kerberos Augeas lens
  - server install: fix KDC PKINIT configuration
  - ipapython.ipautil.run: Add option to set umask before executing command
  - certs: do not export keys world-readable in install_key_from_p12
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
  - replica install: respect --pkinit-cert-file
  - cacert manage: support PKINIT
  - server certinstall: support PKINIT
- Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
  option
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
- Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
  decommissioned
  - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
- Resolves: #1451712 KRA installation fails on server that was originally
  installed as CA-less
  - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
- Resolves: #1441499 ipa cert-show does not raise error if no file name
  specified
  - ca/cert-show: check certificate_out in options
- Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
  - Remove pkinit-anonymous command
- Resolves: #1449523 Provide an API command to retrieve PKINIT status
  in the FreeIPA topology
  - Allow for multivalued server attributes
  - Refactor the role/attribute member reporting code
  - Add an attribute reporting client PKINIT-capable servers
  - Add the list of PKINIT servers as a virtual attribute to global config
  - Add `pkinit-status` command
  - test_serverroles: Get rid of MockLDAP and use ldap2 instead
- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
  - Fix rare race condition with missing ccache file
- Resolves: #1455045 Simple service uninstallers must be able to handle
  missing service files gracefully
  - only stop/disable simple service if it is installed
- Resolves: #1455541 after upgrade login from web ui breaks
  - krb5: make sure KDC certificate is readable
- Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
  command "ipa cert-request --add" after upgrade
  - Change python-cryptography to python2-cryptography</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos" date="1501502400">- Roll in CentOS Branding
- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="0d510f42f0b711abe67985fe4202a0c5427ed2333966ec5d1de0e9d5dd93a8c8" name="ipa" arch="src">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-13.el7" date="1495108800">- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
  error observed during ipa upgrade with latest package. 
  - ipa-server-install: fix uninstall
- Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
  replica 
  - ca install: merge duplicated code for DM password
  - installutils: add DM password validator
  - ca, kra install: validate DM password</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-14.el7" date="1495627200">- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
  handle PKINIT certificates/anchors
  - certdb: add named trust flag constants
  - certdb, certs: make trust flags argument mandatory
  - certdb: use custom object for trust flags
  - install: trust IPA CA for PKINIT
  - client install: fix client PKINIT configuration
  - install: introduce generic Kerberos Augeas lens
  - server install: fix KDC PKINIT configuration
  - ipapython.ipautil.run: Add option to set umask before executing command
  - certs: do not export keys world-readable in install_key_from_p12
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
  - replica install: respect --pkinit-cert-file
  - cacert manage: support PKINIT
  - server certinstall: support PKINIT
- Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
  option
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
- Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
  decommissioned
  - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
- Resolves: #1451712 KRA installation fails on server that was originally
  installed as CA-less
  - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
- Resolves: #1441499 ipa cert-show does not raise error if no file name
  specified
  - ca/cert-show: check certificate_out in options
- Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
  - Remove pkinit-anonymous command
- Resolves: #1449523 Provide an API command to retrieve PKINIT status
  in the FreeIPA topology
  - Allow for multivalued server attributes
  - Refactor the role/attribute member reporting code
  - Add an attribute reporting client PKINIT-capable servers
  - Add the list of PKINIT servers as a virtual attribute to global config
  - Add `pkinit-status` command
  - test_serverroles: Get rid of MockLDAP and use ldap2 instead
- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
  - Fix rare race condition with missing ccache file
- Resolves: #1455045 Simple service uninstallers must be able to handle
  missing service files gracefully
  - only stop/disable simple service if it is installed
- Resolves: #1455541 after upgrade login from web ui breaks
  - krb5: make sure KDC certificate is readable
- Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
  command "ipa cert-request --add" after upgrade
  - Change python-cryptography to python2-cryptography</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos" date="1501502400">- Roll in CentOS Branding
- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="d215eb73f2984074feff28b80b78dc8eb425d81e48d82ec93d2f72a59276fb43" name="ipa" arch="src">
  <version epoch="0" ver="4.5.0" rel="22.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043200">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043201">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="f30f00662a6f5f62575d896ef1f23898ab51ac4f04a26001d6b3021913c51ab4" name="ipa" arch="src">
  <version epoch="0" ver="4.5.0" rel="22.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043200">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043201">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="4a651f2b49c47fd0ef7dfb476453d42f0abb3758ddd23e49458f0d039002141d" name="ipa-client" arch="i686">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504612800">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504699200">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="3d3bd30b8ffdbd7b17cb0589a2ae210b512134920431658436d879c5d765a1d1" name="ipa-client" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504612800">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504699200">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="59eef8f60e162a0ba268ddcf2fd47c12818f3613aed26212c4729aef1ef34d31" name="ipa-client" arch="i686">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414400">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414401">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="144f1a19acc3b6fc2d1503d78615ba24c696d96f8f58a5fac3c4ed0533c0eb31" name="ipa-client" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414400">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414401">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="cb3123c6364f4ce14715647b56241f555a6d1212f6b7976c37616fdb3f12b5c9" name="ipa-client" arch="i686">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-13.el7" date="1495108800">- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
  error observed during ipa upgrade with latest package. 
  - ipa-server-install: fix uninstall
- Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
  replica 
  - ca install: merge duplicated code for DM password
  - installutils: add DM password validator
  - ca, kra install: validate DM password</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-14.el7" date="1495627200">- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
  handle PKINIT certificates/anchors
  - certdb: add named trust flag constants
  - certdb, certs: make trust flags argument mandatory
  - certdb: use custom object for trust flags
  - install: trust IPA CA for PKINIT
  - client install: fix client PKINIT configuration
  - install: introduce generic Kerberos Augeas lens
  - server install: fix KDC PKINIT configuration
  - ipapython.ipautil.run: Add option to set umask before executing command
  - certs: do not export keys world-readable in install_key_from_p12
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
  - replica install: respect --pkinit-cert-file
  - cacert manage: support PKINIT
  - server certinstall: support PKINIT
- Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
  option
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
- Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
  decommissioned
  - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
- Resolves: #1451712 KRA installation fails on server that was originally
  installed as CA-less
  - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
- Resolves: #1441499 ipa cert-show does not raise error if no file name
  specified
  - ca/cert-show: check certificate_out in options
- Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
  - Remove pkinit-anonymous command
- Resolves: #1449523 Provide an API command to retrieve PKINIT status
  in the FreeIPA topology
  - Allow for multivalued server attributes
  - Refactor the role/attribute member reporting code
  - Add an attribute reporting client PKINIT-capable servers
  - Add the list of PKINIT servers as a virtual attribute to global config
  - Add `pkinit-status` command
  - test_serverroles: Get rid of MockLDAP and use ldap2 instead
- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
  - Fix rare race condition with missing ccache file
- Resolves: #1455045 Simple service uninstallers must be able to handle
  missing service files gracefully
  - only stop/disable simple service if it is installed
- Resolves: #1455541 after upgrade login from web ui breaks
  - krb5: make sure KDC certificate is readable
- Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
  command "ipa cert-request --add" after upgrade
  - Change python-cryptography to python2-cryptography</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos" date="1501502400">- Roll in CentOS Branding
- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="156b78637eb175c81e94fd5c519371b2fe55f6959bc0812b084e8687e8da3d68" name="ipa-client" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-13.el7" date="1495108800">- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
  error observed during ipa upgrade with latest package. 
  - ipa-server-install: fix uninstall
- Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
  replica 
  - ca install: merge duplicated code for DM password
  - installutils: add DM password validator
  - ca, kra install: validate DM password</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-14.el7" date="1495627200">- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
  handle PKINIT certificates/anchors
  - certdb: add named trust flag constants
  - certdb, certs: make trust flags argument mandatory
  - certdb: use custom object for trust flags
  - install: trust IPA CA for PKINIT
  - client install: fix client PKINIT configuration
  - install: introduce generic Kerberos Augeas lens
  - server install: fix KDC PKINIT configuration
  - ipapython.ipautil.run: Add option to set umask before executing command
  - certs: do not export keys world-readable in install_key_from_p12
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
  - replica install: respect --pkinit-cert-file
  - cacert manage: support PKINIT
  - server certinstall: support PKINIT
- Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
  option
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
- Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
  decommissioned
  - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
- Resolves: #1451712 KRA installation fails on server that was originally
  installed as CA-less
  - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
- Resolves: #1441499 ipa cert-show does not raise error if no file name
  specified
  - ca/cert-show: check certificate_out in options
- Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
  - Remove pkinit-anonymous command
- Resolves: #1449523 Provide an API command to retrieve PKINIT status
  in the FreeIPA topology
  - Allow for multivalued server attributes
  - Refactor the role/attribute member reporting code
  - Add an attribute reporting client PKINIT-capable servers
  - Add the list of PKINIT servers as a virtual attribute to global config
  - Add `pkinit-status` command
  - test_serverroles: Get rid of MockLDAP and use ldap2 instead
- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
  - Fix rare race condition with missing ccache file
- Resolves: #1455045 Simple service uninstallers must be able to handle
  missing service files gracefully
  - only stop/disable simple service if it is installed
- Resolves: #1455541 after upgrade login from web ui breaks
  - krb5: make sure KDC certificate is readable
- Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
  command "ipa cert-request --add" after upgrade
  - Change python-cryptography to python2-cryptography</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos" date="1501502400">- Roll in CentOS Branding
- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="39b278f727fc0b50f494643e65d4294e7f0dfeb96f80d3be64f7a504107c2021" name="ipa-client" arch="i686">
  <version epoch="0" ver="4.5.0" rel="22.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043200">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043201">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="13c2460f8d9ab3060263caaefea7b52a68443461276ec52e31f055419b7adadd" name="ipa-client" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="22.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043200">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043201">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="e88c29f94e8087617d94cf7e8bcf86a1da3de3c339e8d90b9022a379cfbef810" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504612800">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504699200">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="a893fab921aa7f120445d5a788ffe2ea610c940b9a4b4ba6607bffc64cf82bd3" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504612800">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504699200">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="545d7235329079adb1ace6653f560bfafa79695ef69a564612b81c7c954fec2d" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414400">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414401">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="ff1c29c5f303567a98ff79ddecda4c576ac92c2c30007128320d556a6afe2e33" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414400">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414401">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="b0c3ae51454edac732f1a611b1c0b735b5fc01928f358cf751e7e886da94708c" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-13.el7" date="1495108800">- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
  error observed during ipa upgrade with latest package. 
  - ipa-server-install: fix uninstall
- Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
  replica 
  - ca install: merge duplicated code for DM password
  - installutils: add DM password validator
  - ca, kra install: validate DM password</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-14.el7" date="1495627200">- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
  handle PKINIT certificates/anchors
  - certdb: add named trust flag constants
  - certdb, certs: make trust flags argument mandatory
  - certdb: use custom object for trust flags
  - install: trust IPA CA for PKINIT
  - client install: fix client PKINIT configuration
  - install: introduce generic Kerberos Augeas lens
  - server install: fix KDC PKINIT configuration
  - ipapython.ipautil.run: Add option to set umask before executing command
  - certs: do not export keys world-readable in install_key_from_p12
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
  - replica install: respect --pkinit-cert-file
  - cacert manage: support PKINIT
  - server certinstall: support PKINIT
- Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
  option
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
- Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
  decommissioned
  - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
- Resolves: #1451712 KRA installation fails on server that was originally
  installed as CA-less
  - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
- Resolves: #1441499 ipa cert-show does not raise error if no file name
  specified
  - ca/cert-show: check certificate_out in options
- Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
  - Remove pkinit-anonymous command
- Resolves: #1449523 Provide an API command to retrieve PKINIT status
  in the FreeIPA topology
  - Allow for multivalued server attributes
  - Refactor the role/attribute member reporting code
  - Add an attribute reporting client PKINIT-capable servers
  - Add the list of PKINIT servers as a virtual attribute to global config
  - Add `pkinit-status` command
  - test_serverroles: Get rid of MockLDAP and use ldap2 instead
- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
  - Fix rare race condition with missing ccache file
- Resolves: #1455045 Simple service uninstallers must be able to handle
  missing service files gracefully
  - only stop/disable simple service if it is installed
- Resolves: #1455541 after upgrade login from web ui breaks
  - krb5: make sure KDC certificate is readable
- Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
  command "ipa cert-request --add" after upgrade
  - Change python-cryptography to python2-cryptography</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos" date="1501502400">- Roll in CentOS Branding
- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="d5cb77aab41e8564213413cd69fb7ec64cebd53b1f8553d0e13ab434c61c4720" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-13.el7" date="1495108800">- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
  error observed during ipa upgrade with latest package. 
  - ipa-server-install: fix uninstall
- Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
  replica 
  - ca install: merge duplicated code for DM password
  - installutils: add DM password validator
  - ca, kra install: validate DM password</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-14.el7" date="1495627200">- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
  handle PKINIT certificates/anchors
  - certdb: add named trust flag constants
  - certdb, certs: make trust flags argument mandatory
  - certdb: use custom object for trust flags
  - install: trust IPA CA for PKINIT
  - client install: fix client PKINIT configuration
  - install: introduce generic Kerberos Augeas lens
  - server install: fix KDC PKINIT configuration
  - ipapython.ipautil.run: Add option to set umask before executing command
  - certs: do not export keys world-readable in install_key_from_p12
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
  - replica install: respect --pkinit-cert-file
  - cacert manage: support PKINIT
  - server certinstall: support PKINIT
- Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
  option
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
- Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
  decommissioned
  - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
- Resolves: #1451712 KRA installation fails on server that was originally
  installed as CA-less
  - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
- Resolves: #1441499 ipa cert-show does not raise error if no file name
  specified
  - ca/cert-show: check certificate_out in options
- Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
  - Remove pkinit-anonymous command
- Resolves: #1449523 Provide an API command to retrieve PKINIT status
  in the FreeIPA topology
  - Allow for multivalued server attributes
  - Refactor the role/attribute member reporting code
  - Add an attribute reporting client PKINIT-capable servers
  - Add the list of PKINIT servers as a virtual attribute to global config
  - Add `pkinit-status` command
  - test_serverroles: Get rid of MockLDAP and use ldap2 instead
- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
  - Fix rare race condition with missing ccache file
- Resolves: #1455045 Simple service uninstallers must be able to handle
  missing service files gracefully
  - only stop/disable simple service if it is installed
- Resolves: #1455541 after upgrade login from web ui breaks
  - krb5: make sure KDC certificate is readable
- Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
  command "ipa cert-request --add" after upgrade
  - Change python-cryptography to python2-cryptography</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos" date="1501502400">- Roll in CentOS Branding
- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="a00e3b7a8c80cfad719dff00375b073e34991bf0fb60a8ab31ca951831ee5d06" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="22.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043200">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043201">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="aa796afdfe766e429b1c16164de239431a9fff2e70d10286b8c728c8d2875dd3" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="22.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043200">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043201">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="8b61fbafb5eeec7532f866969e2f549cb6d0de137a36e3b0252f3a381fa98857" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504612800">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504699200">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="a62f33de791d95afdb3bb5cc99d27cc19ed563f1818c6eaf937683a91f3907b8" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504612800">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504699200">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="91d6bc3d397251ff2ba606fddd63d101cd52518346c7e6c89c7fc011868a0047" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414400">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414401">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="b6631e32f6d36f38464a8b7326a5e904cfced5355f7ab834e651c155e64bc63d" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414400">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414401">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="f39e3b777a5cbd41faf10e42f73e7abbc1e47fe4142093b854f46ec633ec7dfb" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-13.el7" date="1495108800">- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
  error observed during ipa upgrade with latest package. 
  - ipa-server-install: fix uninstall
- Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
  replica 
  - ca install: merge duplicated code for DM password
  - installutils: add DM password validator
  - ca, kra install: validate DM password</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-14.el7" date="1495627200">- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
  handle PKINIT certificates/anchors
  - certdb: add named trust flag constants
  - certdb, certs: make trust flags argument mandatory
  - certdb: use custom object for trust flags
  - install: trust IPA CA for PKINIT
  - client install: fix client PKINIT configuration
  - install: introduce generic Kerberos Augeas lens
  - server install: fix KDC PKINIT configuration
  - ipapython.ipautil.run: Add option to set umask before executing command
  - certs: do not export keys world-readable in install_key_from_p12
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
  - replica install: respect --pkinit-cert-file
  - cacert manage: support PKINIT
  - server certinstall: support PKINIT
- Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
  option
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
- Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
  decommissioned
  - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
- Resolves: #1451712 KRA installation fails on server that was originally
  installed as CA-less
  - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
- Resolves: #1441499 ipa cert-show does not raise error if no file name
  specified
  - ca/cert-show: check certificate_out in options
- Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
  - Remove pkinit-anonymous command
- Resolves: #1449523 Provide an API command to retrieve PKINIT status
  in the FreeIPA topology
  - Allow for multivalued server attributes
  - Refactor the role/attribute member reporting code
  - Add an attribute reporting client PKINIT-capable servers
  - Add the list of PKINIT servers as a virtual attribute to global config
  - Add `pkinit-status` command
  - test_serverroles: Get rid of MockLDAP and use ldap2 instead
- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
  - Fix rare race condition with missing ccache file
- Resolves: #1455045 Simple service uninstallers must be able to handle
  missing service files gracefully
  - only stop/disable simple service if it is installed
- Resolves: #1455541 after upgrade login from web ui breaks
  - krb5: make sure KDC certificate is readable
- Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
  command "ipa cert-request --add" after upgrade
  - Change python-cryptography to python2-cryptography</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos" date="1501502400">- Roll in CentOS Branding
- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="7c498a94ca24cfc903ca14e034969adefee3bf8139125795fea71da2298861b5" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-13.el7" date="1495108800">- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
  error observed during ipa upgrade with latest package. 
  - ipa-server-install: fix uninstall
- Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
  replica 
  - ca install: merge duplicated code for DM password
  - installutils: add DM password validator
  - ca, kra install: validate DM password</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-14.el7" date="1495627200">- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
  handle PKINIT certificates/anchors
  - certdb: add named trust flag constants
  - certdb, certs: make trust flags argument mandatory
  - certdb: use custom object for trust flags
  - install: trust IPA CA for PKINIT
  - client install: fix client PKINIT configuration
  - install: introduce generic Kerberos Augeas lens
  - server install: fix KDC PKINIT configuration
  - ipapython.ipautil.run: Add option to set umask before executing command
  - certs: do not export keys world-readable in install_key_from_p12
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
  - replica install: respect --pkinit-cert-file
  - cacert manage: support PKINIT
  - server certinstall: support PKINIT
- Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
  option
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
- Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
  decommissioned
  - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
- Resolves: #1451712 KRA installation fails on server that was originally
  installed as CA-less
  - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
- Resolves: #1441499 ipa cert-show does not raise error if no file name
  specified
  - ca/cert-show: check certificate_out in options
- Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
  - Remove pkinit-anonymous command
- Resolves: #1449523 Provide an API command to retrieve PKINIT status
  in the FreeIPA topology
  - Allow for multivalued server attributes
  - Refactor the role/attribute member reporting code
  - Add an attribute reporting client PKINIT-capable servers
  - Add the list of PKINIT servers as a virtual attribute to global config
  - Add `pkinit-status` command
  - test_serverroles: Get rid of MockLDAP and use ldap2 instead
- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
  - Fix rare race condition with missing ccache file
- Resolves: #1455045 Simple service uninstallers must be able to handle
  missing service files gracefully
  - only stop/disable simple service if it is installed
- Resolves: #1455541 after upgrade login from web ui breaks
  - krb5: make sure KDC certificate is readable
- Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
  command "ipa cert-request --add" after upgrade
  - Change python-cryptography to python2-cryptography</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos" date="1501502400">- Roll in CentOS Branding
- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="fa95253215a0ab3168c1f24d7b7a68783e7530e95f87e1e4d6566a545d9c2bbe" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="22.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043200">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043201">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="46990245836dddee0de4985de9f39a035ad10ab0a8df224966430b29de621c36" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="22.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043200">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043201">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="7ee5cfca93142d6797ae18d631bc48637897b15be87e693c2b6f58514689613f" name="ipa-debuginfo" arch="i686">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504612800">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504699200">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="5ddd83996033725b15fc48e6b8d626abd073905b85cad236b8eeec80de9921f1" name="ipa-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504612800">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504699200">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="a62a4ffc33085898845a6ec4fb488a9921a560b5fb3dbc74ccb7c05c75deebe5" name="ipa-debuginfo" arch="i686">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414400">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414401">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="81054f5edf6e39898533d0a3595953654ed5995fbd08ef4a53c5976854b9dadd" name="ipa-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414400">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414401">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="605d1ed2a8e70d01a406e61b92480dbbf19e0777b5b703cb4ab04bc26fbd25fb" name="ipa-debuginfo" arch="i686">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-13.el7" date="1495108800">- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
  error observed during ipa upgrade with latest package. 
  - ipa-server-install: fix uninstall
- Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
  replica 
  - ca install: merge duplicated code for DM password
  - installutils: add DM password validator
  - ca, kra install: validate DM password</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-14.el7" date="1495627200">- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
  handle PKINIT certificates/anchors
  - certdb: add named trust flag constants
  - certdb, certs: make trust flags argument mandatory
  - certdb: use custom object for trust flags
  - install: trust IPA CA for PKINIT
  - client install: fix client PKINIT configuration
  - install: introduce generic Kerberos Augeas lens
  - server install: fix KDC PKINIT configuration
  - ipapython.ipautil.run: Add option to set umask before executing command
  - certs: do not export keys world-readable in install_key_from_p12
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
  - replica install: respect --pkinit-cert-file
  - cacert manage: support PKINIT
  - server certinstall: support PKINIT
- Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
  option
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
- Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
  decommissioned
  - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
- Resolves: #1451712 KRA installation fails on server that was originally
  installed as CA-less
  - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
- Resolves: #1441499 ipa cert-show does not raise error if no file name
  specified
  - ca/cert-show: check certificate_out in options
- Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
  - Remove pkinit-anonymous command
- Resolves: #1449523 Provide an API command to retrieve PKINIT status
  in the FreeIPA topology
  - Allow for multivalued server attributes
  - Refactor the role/attribute member reporting code
  - Add an attribute reporting client PKINIT-capable servers
  - Add the list of PKINIT servers as a virtual attribute to global config
  - Add `pkinit-status` command
  - test_serverroles: Get rid of MockLDAP and use ldap2 instead
- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
  - Fix rare race condition with missing ccache file
- Resolves: #1455045 Simple service uninstallers must be able to handle
  missing service files gracefully
  - only stop/disable simple service if it is installed
- Resolves: #1455541 after upgrade login from web ui breaks
  - krb5: make sure KDC certificate is readable
- Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
  command "ipa cert-request --add" after upgrade
  - Change python-cryptography to python2-cryptography</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos" date="1501502400">- Roll in CentOS Branding
- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="b69d47db33682466e30994f2fede3645feea4c52b0cc10c0cbdba0550b0ae3d7" name="ipa-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-13.el7" date="1495108800">- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
  error observed during ipa upgrade with latest package. 
  - ipa-server-install: fix uninstall
- Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
  replica 
  - ca install: merge duplicated code for DM password
  - installutils: add DM password validator
  - ca, kra install: validate DM password</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-14.el7" date="1495627200">- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
  handle PKINIT certificates/anchors
  - certdb: add named trust flag constants
  - certdb, certs: make trust flags argument mandatory
  - certdb: use custom object for trust flags
  - install: trust IPA CA for PKINIT
  - client install: fix client PKINIT configuration
  - install: introduce generic Kerberos Augeas lens
  - server install: fix KDC PKINIT configuration
  - ipapython.ipautil.run: Add option to set umask before executing command
  - certs: do not export keys world-readable in install_key_from_p12
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
  - replica install: respect --pkinit-cert-file
  - cacert manage: support PKINIT
  - server certinstall: support PKINIT
- Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
  option
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
- Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
  decommissioned
  - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
- Resolves: #1451712 KRA installation fails on server that was originally
  installed as CA-less
  - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
- Resolves: #1441499 ipa cert-show does not raise error if no file name
  specified
  - ca/cert-show: check certificate_out in options
- Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
  - Remove pkinit-anonymous command
- Resolves: #1449523 Provide an API command to retrieve PKINIT status
  in the FreeIPA topology
  - Allow for multivalued server attributes
  - Refactor the role/attribute member reporting code
  - Add an attribute reporting client PKINIT-capable servers
  - Add the list of PKINIT servers as a virtual attribute to global config
  - Add `pkinit-status` command
  - test_serverroles: Get rid of MockLDAP and use ldap2 instead
- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
  - Fix rare race condition with missing ccache file
- Resolves: #1455045 Simple service uninstallers must be able to handle
  missing service files gracefully
  - only stop/disable simple service if it is installed
- Resolves: #1455541 after upgrade login from web ui breaks
  - krb5: make sure KDC certificate is readable
- Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
  command "ipa cert-request --add" after upgrade
  - Change python-cryptography to python2-cryptography</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos" date="1501502400">- Roll in CentOS Branding
- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="f36fa595b0558ded47dbbe1feec76a0f944774993a0bf11a36ce8eb863b8159c" name="ipa-debuginfo" arch="i686">
  <version epoch="0" ver="4.5.0" rel="22.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043200">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043201">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="05f1b20de4012e066f40c94431f9c7af6c2334d71d01b338c9c3b391ff81637d" name="ipa-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="22.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043200">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043201">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="3f3900f3edacfc24b8949fe974df0ab7227c2da377cdb2669698162f84513f2a" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504612800">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504699200">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="c48af42efcd3241071146cadd3a2b7735cdb51c79323e4bf226e2e74798ea08d" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504612800">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504699200">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="ab875466db19e8cb1ab4251deb4bb5e09e1051cc74468ab50fec187595fe1e9b" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414400">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414401">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="6882d7d049fc8f75802295a1f28e0f3d40d62d3136cb42891004fdac7767f2e1" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414400">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414401">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="71784c3138b9817ecd73ca099210d4c10e7b07424812f76d9903ed022b29490b" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-13.el7" date="1495108800">- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
  error observed during ipa upgrade with latest package. 
  - ipa-server-install: fix uninstall
- Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
  replica 
  - ca install: merge duplicated code for DM password
  - installutils: add DM password validator
  - ca, kra install: validate DM password</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-14.el7" date="1495627200">- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
  handle PKINIT certificates/anchors
  - certdb: add named trust flag constants
  - certdb, certs: make trust flags argument mandatory
  - certdb: use custom object for trust flags
  - install: trust IPA CA for PKINIT
  - client install: fix client PKINIT configuration
  - install: introduce generic Kerberos Augeas lens
  - server install: fix KDC PKINIT configuration
  - ipapython.ipautil.run: Add option to set umask before executing command
  - certs: do not export keys world-readable in install_key_from_p12
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
  - replica install: respect --pkinit-cert-file
  - cacert manage: support PKINIT
  - server certinstall: support PKINIT
- Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
  option
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
- Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
  decommissioned
  - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
- Resolves: #1451712 KRA installation fails on server that was originally
  installed as CA-less
  - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
- Resolves: #1441499 ipa cert-show does not raise error if no file name
  specified
  - ca/cert-show: check certificate_out in options
- Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
  - Remove pkinit-anonymous command
- Resolves: #1449523 Provide an API command to retrieve PKINIT status
  in the FreeIPA topology
  - Allow for multivalued server attributes
  - Refactor the role/attribute member reporting code
  - Add an attribute reporting client PKINIT-capable servers
  - Add the list of PKINIT servers as a virtual attribute to global config
  - Add `pkinit-status` command
  - test_serverroles: Get rid of MockLDAP and use ldap2 instead
- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
  - Fix rare race condition with missing ccache file
- Resolves: #1455045 Simple service uninstallers must be able to handle
  missing service files gracefully
  - only stop/disable simple service if it is installed
- Resolves: #1455541 after upgrade login from web ui breaks
  - krb5: make sure KDC certificate is readable
- Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
  command "ipa cert-request --add" after upgrade
  - Change python-cryptography to python2-cryptography</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos" date="1501502400">- Roll in CentOS Branding
- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="735c0ae77f0ed7a877e4150ea515a109c8c69fe61580244343c0640e522f57f7" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-13.el7" date="1495108800">- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
  error observed during ipa upgrade with latest package. 
  - ipa-server-install: fix uninstall
- Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
  replica 
  - ca install: merge duplicated code for DM password
  - installutils: add DM password validator
  - ca, kra install: validate DM password</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-14.el7" date="1495627200">- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
  handle PKINIT certificates/anchors
  - certdb: add named trust flag constants
  - certdb, certs: make trust flags argument mandatory
  - certdb: use custom object for trust flags
  - install: trust IPA CA for PKINIT
  - client install: fix client PKINIT configuration
  - install: introduce generic Kerberos Augeas lens
  - server install: fix KDC PKINIT configuration
  - ipapython.ipautil.run: Add option to set umask before executing command
  - certs: do not export keys world-readable in install_key_from_p12
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
  - replica install: respect --pkinit-cert-file
  - cacert manage: support PKINIT
  - server certinstall: support PKINIT
- Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
  option
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
- Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
  decommissioned
  - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
- Resolves: #1451712 KRA installation fails on server that was originally
  installed as CA-less
  - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
- Resolves: #1441499 ipa cert-show does not raise error if no file name
  specified
  - ca/cert-show: check certificate_out in options
- Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
  - Remove pkinit-anonymous command
- Resolves: #1449523 Provide an API command to retrieve PKINIT status
  in the FreeIPA topology
  - Allow for multivalued server attributes
  - Refactor the role/attribute member reporting code
  - Add an attribute reporting client PKINIT-capable servers
  - Add the list of PKINIT servers as a virtual attribute to global config
  - Add `pkinit-status` command
  - test_serverroles: Get rid of MockLDAP and use ldap2 instead
- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
  - Fix rare race condition with missing ccache file
- Resolves: #1455045 Simple service uninstallers must be able to handle
  missing service files gracefully
  - only stop/disable simple service if it is installed
- Resolves: #1455541 after upgrade login from web ui breaks
  - krb5: make sure KDC certificate is readable
- Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
  command "ipa cert-request --add" after upgrade
  - Change python-cryptography to python2-cryptography</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos" date="1501502400">- Roll in CentOS Branding
- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="75f7f4a0cb73dd0b315ee964d0054b84e654fc545447080f69f1ec8b4a7def3a" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="22.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043200">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043201">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="74a9a226596dd5a634cdaa01487262b509ddfaf3d3667e66ae99b83c0c34445e" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="22.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043200">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043201">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="4581c1398a65966aab530e238fad3a764c0717ad3f1c2ef9613d7f9aee6b7c76" name="ipa-server" arch="i686">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504612800">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504699200">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="0b269a1fc8c7a290c6c15e753c328fd49cae98a8efeb4d8f558cdddd1ad0bf00" name="ipa-server" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504612800">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504699200">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="ea49cd16b26017120f18bf97c95f8fff6f8f2815b6d24d9985d1d2d1f874c922" name="ipa-server" arch="i686">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414400">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414401">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="c159f8674da0b9747c24bcb3d837be46bd0db4d017ce75bc70a2ca5e613a2226" name="ipa-server" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414400">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414401">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="2cf7b2a699ee2dc6bb8add9f0ea6efcc4137fbe7a6e882904ab1972e338e184b" name="ipa-server" arch="i686">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-13.el7" date="1495108800">- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
  error observed during ipa upgrade with latest package. 
  - ipa-server-install: fix uninstall
- Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
  replica 
  - ca install: merge duplicated code for DM password
  - installutils: add DM password validator
  - ca, kra install: validate DM password</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-14.el7" date="1495627200">- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
  handle PKINIT certificates/anchors
  - certdb: add named trust flag constants
  - certdb, certs: make trust flags argument mandatory
  - certdb: use custom object for trust flags
  - install: trust IPA CA for PKINIT
  - client install: fix client PKINIT configuration
  - install: introduce generic Kerberos Augeas lens
  - server install: fix KDC PKINIT configuration
  - ipapython.ipautil.run: Add option to set umask before executing command
  - certs: do not export keys world-readable in install_key_from_p12
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
  - replica install: respect --pkinit-cert-file
  - cacert manage: support PKINIT
  - server certinstall: support PKINIT
- Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
  option
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
- Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
  decommissioned
  - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
- Resolves: #1451712 KRA installation fails on server that was originally
  installed as CA-less
  - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
- Resolves: #1441499 ipa cert-show does not raise error if no file name
  specified
  - ca/cert-show: check certificate_out in options
- Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
  - Remove pkinit-anonymous command
- Resolves: #1449523 Provide an API command to retrieve PKINIT status
  in the FreeIPA topology
  - Allow for multivalued server attributes
  - Refactor the role/attribute member reporting code
  - Add an attribute reporting client PKINIT-capable servers
  - Add the list of PKINIT servers as a virtual attribute to global config
  - Add `pkinit-status` command
  - test_serverroles: Get rid of MockLDAP and use ldap2 instead
- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
  - Fix rare race condition with missing ccache file
- Resolves: #1455045 Simple service uninstallers must be able to handle
  missing service files gracefully
  - only stop/disable simple service if it is installed
- Resolves: #1455541 after upgrade login from web ui breaks
  - krb5: make sure KDC certificate is readable
- Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
  command "ipa cert-request --add" after upgrade
  - Change python-cryptography to python2-cryptography</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos" date="1501502400">- Roll in CentOS Branding
- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="599bae8dfca23cbab818383dac0cb00be076a6aaa38262d581347a2e084c89a4" name="ipa-server" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-13.el7" date="1495108800">- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
  error observed during ipa upgrade with latest package. 
  - ipa-server-install: fix uninstall
- Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
  replica 
  - ca install: merge duplicated code for DM password
  - installutils: add DM password validator
  - ca, kra install: validate DM password</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-14.el7" date="1495627200">- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
  handle PKINIT certificates/anchors
  - certdb: add named trust flag constants
  - certdb, certs: make trust flags argument mandatory
  - certdb: use custom object for trust flags
  - install: trust IPA CA for PKINIT
  - client install: fix client PKINIT configuration
  - install: introduce generic Kerberos Augeas lens
  - server install: fix KDC PKINIT configuration
  - ipapython.ipautil.run: Add option to set umask before executing command
  - certs: do not export keys world-readable in install_key_from_p12
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
  - replica install: respect --pkinit-cert-file
  - cacert manage: support PKINIT
  - server certinstall: support PKINIT
- Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
  option
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
- Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
  decommissioned
  - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
- Resolves: #1451712 KRA installation fails on server that was originally
  installed as CA-less
  - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
- Resolves: #1441499 ipa cert-show does not raise error if no file name
  specified
  - ca/cert-show: check certificate_out in options
- Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
  - Remove pkinit-anonymous command
- Resolves: #1449523 Provide an API command to retrieve PKINIT status
  in the FreeIPA topology
  - Allow for multivalued server attributes
  - Refactor the role/attribute member reporting code
  - Add an attribute reporting client PKINIT-capable servers
  - Add the list of PKINIT servers as a virtual attribute to global config
  - Add `pkinit-status` command
  - test_serverroles: Get rid of MockLDAP and use ldap2 instead
- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
  - Fix rare race condition with missing ccache file
- Resolves: #1455045 Simple service uninstallers must be able to handle
  missing service files gracefully
  - only stop/disable simple service if it is installed
- Resolves: #1455541 after upgrade login from web ui breaks
  - krb5: make sure KDC certificate is readable
- Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
  command "ipa cert-request --add" after upgrade
  - Change python-cryptography to python2-cryptography</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos" date="1501502400">- Roll in CentOS Branding
- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="4611a1b2eca689bec47ff51378a63fecc8f0a30e95d94cbedcff580986397590" name="ipa-server" arch="i686">
  <version epoch="0" ver="4.5.0" rel="22.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043200">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043201">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="ed31dfc4332cb05226b4286f070dd6a513bbc5b49d6b7f7f1e63c57c64bde117" name="ipa-server" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="22.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043200">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043201">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="477ce6a38e92acf335dcbd4eb99ad5204e7a9261567b25efde59efccca3511b3" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504612800">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504699200">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="a64f892ce165f67d96e7aec029df789138c931fb4dd89e891dc00e8d67be86d1" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504612800">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504699200">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="cef5fccae308acfc1a89c253d8b490d0025b7ef8d2d4d1dac1f0453aee59e824" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414400">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414401">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="e4b59eec9448408a83e1ba457560099b7eb72b831e0677068b3b95b9fb512b98" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414400">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414401">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="885540ce1b01841ade3df9f5ab710f0706087d6e1421b7e7161d733dd487bece" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-13.el7" date="1495108800">- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
  error observed during ipa upgrade with latest package. 
  - ipa-server-install: fix uninstall
- Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
  replica 
  - ca install: merge duplicated code for DM password
  - installutils: add DM password validator
  - ca, kra install: validate DM password</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-14.el7" date="1495627200">- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
  handle PKINIT certificates/anchors
  - certdb: add named trust flag constants
  - certdb, certs: make trust flags argument mandatory
  - certdb: use custom object for trust flags
  - install: trust IPA CA for PKINIT
  - client install: fix client PKINIT configuration
  - install: introduce generic Kerberos Augeas lens
  - server install: fix KDC PKINIT configuration
  - ipapython.ipautil.run: Add option to set umask before executing command
  - certs: do not export keys world-readable in install_key_from_p12
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
  - replica install: respect --pkinit-cert-file
  - cacert manage: support PKINIT
  - server certinstall: support PKINIT
- Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
  option
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
- Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
  decommissioned
  - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
- Resolves: #1451712 KRA installation fails on server that was originally
  installed as CA-less
  - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
- Resolves: #1441499 ipa cert-show does not raise error if no file name
  specified
  - ca/cert-show: check certificate_out in options
- Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
  - Remove pkinit-anonymous command
- Resolves: #1449523 Provide an API command to retrieve PKINIT status
  in the FreeIPA topology
  - Allow for multivalued server attributes
  - Refactor the role/attribute member reporting code
  - Add an attribute reporting client PKINIT-capable servers
  - Add the list of PKINIT servers as a virtual attribute to global config
  - Add `pkinit-status` command
  - test_serverroles: Get rid of MockLDAP and use ldap2 instead
- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
  - Fix rare race condition with missing ccache file
- Resolves: #1455045 Simple service uninstallers must be able to handle
  missing service files gracefully
  - only stop/disable simple service if it is installed
- Resolves: #1455541 after upgrade login from web ui breaks
  - krb5: make sure KDC certificate is readable
- Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
  command "ipa cert-request --add" after upgrade
  - Change python-cryptography to python2-cryptography</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos" date="1501502400">- Roll in CentOS Branding
- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="005a75ee8a5756b29ae8ec06c39dd4663abc12e881cc11a93497e000d5c1a58b" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-13.el7" date="1495108800">- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
  error observed during ipa upgrade with latest package. 
  - ipa-server-install: fix uninstall
- Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
  replica 
  - ca install: merge duplicated code for DM password
  - installutils: add DM password validator
  - ca, kra install: validate DM password</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-14.el7" date="1495627200">- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
  handle PKINIT certificates/anchors
  - certdb: add named trust flag constants
  - certdb, certs: make trust flags argument mandatory
  - certdb: use custom object for trust flags
  - install: trust IPA CA for PKINIT
  - client install: fix client PKINIT configuration
  - install: introduce generic Kerberos Augeas lens
  - server install: fix KDC PKINIT configuration
  - ipapython.ipautil.run: Add option to set umask before executing command
  - certs: do not export keys world-readable in install_key_from_p12
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
  - replica install: respect --pkinit-cert-file
  - cacert manage: support PKINIT
  - server certinstall: support PKINIT
- Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
  option
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
- Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
  decommissioned
  - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
- Resolves: #1451712 KRA installation fails on server that was originally
  installed as CA-less
  - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
- Resolves: #1441499 ipa cert-show does not raise error if no file name
  specified
  - ca/cert-show: check certificate_out in options
- Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
  - Remove pkinit-anonymous command
- Resolves: #1449523 Provide an API command to retrieve PKINIT status
  in the FreeIPA topology
  - Allow for multivalued server attributes
  - Refactor the role/attribute member reporting code
  - Add an attribute reporting client PKINIT-capable servers
  - Add the list of PKINIT servers as a virtual attribute to global config
  - Add `pkinit-status` command
  - test_serverroles: Get rid of MockLDAP and use ldap2 instead
- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
  - Fix rare race condition with missing ccache file
- Resolves: #1455045 Simple service uninstallers must be able to handle
  missing service files gracefully
  - only stop/disable simple service if it is installed
- Resolves: #1455541 after upgrade login from web ui breaks
  - krb5: make sure KDC certificate is readable
- Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
  command "ipa cert-request --add" after upgrade
  - Change python-cryptography to python2-cryptography</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos" date="1501502400">- Roll in CentOS Branding
- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="8b3f0db473f2dc3b354d613e22b5d475e72c523878e0efc75b8bb8e5e7ec9628" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="22.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043200">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043201">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="8cf733a09452e474a75479d532d57d7c99e0646d6b210bb5bf85ebc8550c6550" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="22.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043200">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043201">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="8efc8b4299da19f4c3ba6d4e2df7733d7bc45a51b7129a5681f812fcb56a8bec" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504612800">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504699200">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="f7b069f0b2d7d77ff6926b2d002e9307b1cebdd35d5672623558d5be9c7ec120" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504612800">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504699200">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="edf7734593fe477f6a3fada71b60a99e6fe1649013ffbc0c8107e87714f067da" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414400">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414401">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="3d9fa9fcb18843d99d324bc5dbddb38d029f5f94242612acb55594ee6239cd95" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414400">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414401">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="499542483e2795d05f2a1f028e1a667c277e20cb5099ebe6fccd3aeed0a36bd0" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-13.el7" date="1495108800">- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
  error observed during ipa upgrade with latest package. 
  - ipa-server-install: fix uninstall
- Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
  replica 
  - ca install: merge duplicated code for DM password
  - installutils: add DM password validator
  - ca, kra install: validate DM password</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-14.el7" date="1495627200">- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
  handle PKINIT certificates/anchors
  - certdb: add named trust flag constants
  - certdb, certs: make trust flags argument mandatory
  - certdb: use custom object for trust flags
  - install: trust IPA CA for PKINIT
  - client install: fix client PKINIT configuration
  - install: introduce generic Kerberos Augeas lens
  - server install: fix KDC PKINIT configuration
  - ipapython.ipautil.run: Add option to set umask before executing command
  - certs: do not export keys world-readable in install_key_from_p12
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
  - replica install: respect --pkinit-cert-file
  - cacert manage: support PKINIT
  - server certinstall: support PKINIT
- Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
  option
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
- Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
  decommissioned
  - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
- Resolves: #1451712 KRA installation fails on server that was originally
  installed as CA-less
  - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
- Resolves: #1441499 ipa cert-show does not raise error if no file name
  specified
  - ca/cert-show: check certificate_out in options
- Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
  - Remove pkinit-anonymous command
- Resolves: #1449523 Provide an API command to retrieve PKINIT status
  in the FreeIPA topology
  - Allow for multivalued server attributes
  - Refactor the role/attribute member reporting code
  - Add an attribute reporting client PKINIT-capable servers
  - Add the list of PKINIT servers as a virtual attribute to global config
  - Add `pkinit-status` command
  - test_serverroles: Get rid of MockLDAP and use ldap2 instead
- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
  - Fix rare race condition with missing ccache file
- Resolves: #1455045 Simple service uninstallers must be able to handle
  missing service files gracefully
  - only stop/disable simple service if it is installed
- Resolves: #1455541 after upgrade login from web ui breaks
  - krb5: make sure KDC certificate is readable
- Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
  command "ipa cert-request --add" after upgrade
  - Change python-cryptography to python2-cryptography</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos" date="1501502400">- Roll in CentOS Branding
- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="10d223e2a07c0cc52f31e11980b6472505f9d0a979c5fb47b2db8cf86883dc24" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-13.el7" date="1495108800">- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
  error observed during ipa upgrade with latest package. 
  - ipa-server-install: fix uninstall
- Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
  replica 
  - ca install: merge duplicated code for DM password
  - installutils: add DM password validator
  - ca, kra install: validate DM password</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-14.el7" date="1495627200">- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
  handle PKINIT certificates/anchors
  - certdb: add named trust flag constants
  - certdb, certs: make trust flags argument mandatory
  - certdb: use custom object for trust flags
  - install: trust IPA CA for PKINIT
  - client install: fix client PKINIT configuration
  - install: introduce generic Kerberos Augeas lens
  - server install: fix KDC PKINIT configuration
  - ipapython.ipautil.run: Add option to set umask before executing command
  - certs: do not export keys world-readable in install_key_from_p12
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
  - replica install: respect --pkinit-cert-file
  - cacert manage: support PKINIT
  - server certinstall: support PKINIT
- Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
  option
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
- Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
  decommissioned
  - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
- Resolves: #1451712 KRA installation fails on server that was originally
  installed as CA-less
  - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
- Resolves: #1441499 ipa cert-show does not raise error if no file name
  specified
  - ca/cert-show: check certificate_out in options
- Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
  - Remove pkinit-anonymous command
- Resolves: #1449523 Provide an API command to retrieve PKINIT status
  in the FreeIPA topology
  - Allow for multivalued server attributes
  - Refactor the role/attribute member reporting code
  - Add an attribute reporting client PKINIT-capable servers
  - Add the list of PKINIT servers as a virtual attribute to global config
  - Add `pkinit-status` command
  - test_serverroles: Get rid of MockLDAP and use ldap2 instead
- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
  - Fix rare race condition with missing ccache file
- Resolves: #1455045 Simple service uninstallers must be able to handle
  missing service files gracefully
  - only stop/disable simple service if it is installed
- Resolves: #1455541 after upgrade login from web ui breaks
  - krb5: make sure KDC certificate is readable
- Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
  command "ipa cert-request --add" after upgrade
  - Change python-cryptography to python2-cryptography</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos" date="1501502400">- Roll in CentOS Branding
- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="ad1a62a77f3f55ae5a50bf1ccea7e0a5894ab4570fd79c4b40cf409c5c9e583e" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="22.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043200">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043201">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="db65d0cfd325de8e5ee56784f27d84da9b185fc612ebeec38c1b6beabfe79485" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="22.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043200">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043201">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="a707ccb23c23fc7531b8fd6c3806507522abb8427381ffb850869c9193cbbc2b" name="ipa-server-trust-ad" arch="i686">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504612800">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504699200">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="61875ef9e7dacd0c9441fbc629f8cc2ece40e63a01fa1c9c5d88cad90eff5335" name="ipa-server-trust-ad" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504612800">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504699200">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="d0a67fd611b05b661a1e881e1fba4c2cc3a8f5f6fd3835b34ec83f1969009af7" name="ipa-server-trust-ad" arch="i686">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414400">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414401">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="49ec09ba6f5f1c79292516b156a4ada5ec13b7e6cf6dcc6fd11c040ed44e2704" name="ipa-server-trust-ad" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414400">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414401">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="ca808a77bc4f6b012911d30b1aad21129feb17ba480aac4184cac4d13f3a6a9f" name="ipa-server-trust-ad" arch="i686">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-13.el7" date="1495108800">- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
  error observed during ipa upgrade with latest package. 
  - ipa-server-install: fix uninstall
- Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
  replica 
  - ca install: merge duplicated code for DM password
  - installutils: add DM password validator
  - ca, kra install: validate DM password</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-14.el7" date="1495627200">- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
  handle PKINIT certificates/anchors
  - certdb: add named trust flag constants
  - certdb, certs: make trust flags argument mandatory
  - certdb: use custom object for trust flags
  - install: trust IPA CA for PKINIT
  - client install: fix client PKINIT configuration
  - install: introduce generic Kerberos Augeas lens
  - server install: fix KDC PKINIT configuration
  - ipapython.ipautil.run: Add option to set umask before executing command
  - certs: do not export keys world-readable in install_key_from_p12
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
  - replica install: respect --pkinit-cert-file
  - cacert manage: support PKINIT
  - server certinstall: support PKINIT
- Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
  option
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
- Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
  decommissioned
  - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
- Resolves: #1451712 KRA installation fails on server that was originally
  installed as CA-less
  - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
- Resolves: #1441499 ipa cert-show does not raise error if no file name
  specified
  - ca/cert-show: check certificate_out in options
- Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
  - Remove pkinit-anonymous command
- Resolves: #1449523 Provide an API command to retrieve PKINIT status
  in the FreeIPA topology
  - Allow for multivalued server attributes
  - Refactor the role/attribute member reporting code
  - Add an attribute reporting client PKINIT-capable servers
  - Add the list of PKINIT servers as a virtual attribute to global config
  - Add `pkinit-status` command
  - test_serverroles: Get rid of MockLDAP and use ldap2 instead
- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
  - Fix rare race condition with missing ccache file
- Resolves: #1455045 Simple service uninstallers must be able to handle
  missing service files gracefully
  - only stop/disable simple service if it is installed
- Resolves: #1455541 after upgrade login from web ui breaks
  - krb5: make sure KDC certificate is readable
- Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
  command "ipa cert-request --add" after upgrade
  - Change python-cryptography to python2-cryptography</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos" date="1501502400">- Roll in CentOS Branding
- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="05f146e51b04aba804a81958d943386742c24f07e1121cb223e511614e25ddc7" name="ipa-server-trust-ad" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-13.el7" date="1495108800">- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
  error observed during ipa upgrade with latest package. 
  - ipa-server-install: fix uninstall
- Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
  replica 
  - ca install: merge duplicated code for DM password
  - installutils: add DM password validator
  - ca, kra install: validate DM password</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-14.el7" date="1495627200">- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
  handle PKINIT certificates/anchors
  - certdb: add named trust flag constants
  - certdb, certs: make trust flags argument mandatory
  - certdb: use custom object for trust flags
  - install: trust IPA CA for PKINIT
  - client install: fix client PKINIT configuration
  - install: introduce generic Kerberos Augeas lens
  - server install: fix KDC PKINIT configuration
  - ipapython.ipautil.run: Add option to set umask before executing command
  - certs: do not export keys world-readable in install_key_from_p12
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
  - replica install: respect --pkinit-cert-file
  - cacert manage: support PKINIT
  - server certinstall: support PKINIT
- Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
  option
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
- Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
  decommissioned
  - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
- Resolves: #1451712 KRA installation fails on server that was originally
  installed as CA-less
  - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
- Resolves: #1441499 ipa cert-show does not raise error if no file name
  specified
  - ca/cert-show: check certificate_out in options
- Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
  - Remove pkinit-anonymous command
- Resolves: #1449523 Provide an API command to retrieve PKINIT status
  in the FreeIPA topology
  - Allow for multivalued server attributes
  - Refactor the role/attribute member reporting code
  - Add an attribute reporting client PKINIT-capable servers
  - Add the list of PKINIT servers as a virtual attribute to global config
  - Add `pkinit-status` command
  - test_serverroles: Get rid of MockLDAP and use ldap2 instead
- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
  - Fix rare race condition with missing ccache file
- Resolves: #1455045 Simple service uninstallers must be able to handle
  missing service files gracefully
  - only stop/disable simple service if it is installed
- Resolves: #1455541 after upgrade login from web ui breaks
  - krb5: make sure KDC certificate is readable
- Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
  command "ipa cert-request --add" after upgrade
  - Change python-cryptography to python2-cryptography</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos" date="1501502400">- Roll in CentOS Branding
- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="12bec3c50981d2a7607dbb6a5e493a79280eb9d7513fd6993aac25a491c6b29a" name="ipa-server-trust-ad" arch="i686">
  <version epoch="0" ver="4.5.0" rel="22.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043200">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043201">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="7c3dd2a3f790fd498519e722dc61333639c51462d9a4be021f6e012c768ec012" name="ipa-server-trust-ad" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="22.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043200">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043201">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="5b345bd5ea74326202b4ecd50cd4711db620a453cd57aff72fc57b3878c21b10" name="iptables" arch="i686">
  <version epoch="0" ver="1.4.21" rel="18.2.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-11" date="1394452800">- Added missing "panic" action (RHBZ#1067670)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
</package>
<package pkgid="dbd83930061e89a41518ad95a36ec11e3dab54349bc33c900d056806b7b5e3b2" name="iptables" arch="src">
  <version epoch="0" ver="1.4.21" rel="18.2.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-11" date="1394452800">- Added missing "panic" action (RHBZ#1067670)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
</package>
<package pkgid="94e59d26aa9d50f5983a5ac6baa41718cd8eed30d3c00847b1e89b1582cb457b" name="iptables" arch="src">
  <version epoch="0" ver="1.4.21" rel="18.2.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-11" date="1394452800">- Added missing "panic" action (RHBZ#1067670)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
</package>
<package pkgid="6211929f52bbeac02912e53fdf4657b3111e1f39038c4f611ed5f128def23739" name="iptables" arch="x86_64">
  <version epoch="0" ver="1.4.21" rel="18.2.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-11" date="1394452800">- Added missing "panic" action (RHBZ#1067670)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
</package>
<package pkgid="282c1db37fa9a15734d469c99b10a7b74ed5db7ab049491d2896d138f19ee266" name="iptables" arch="i686">
  <version epoch="0" ver="1.4.21" rel="18.3.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.3" date="1518523200">- Fix incorrect ip6tables.service unit syntax (RHBZ#1538549)</changelog>
</package>
<package pkgid="9976d658300e3b40b3cfc2f3a4f705bb16c3f923b11e8fe91db5d7823bf72994" name="iptables" arch="src">
  <version epoch="0" ver="1.4.21" rel="18.3.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.3" date="1518523200">- Fix incorrect ip6tables.service unit syntax (RHBZ#1538549)</changelog>
</package>
<package pkgid="0c1631609437fbcb511962164fffc299eb0a8912f0afaa2a7faef70ef720e74c" name="iptables" arch="src">
  <version epoch="0" ver="1.4.21" rel="18.3.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.3" date="1518523200">- Fix incorrect ip6tables.service unit syntax (RHBZ#1538549)</changelog>
</package>
<package pkgid="980291b45745054a34fefcb49eac886440c01cce019f77fa7638719cd0e98a67" name="iptables" arch="x86_64">
  <version epoch="0" ver="1.4.21" rel="18.3.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.3" date="1518523200">- Fix incorrect ip6tables.service unit syntax (RHBZ#1538549)</changelog>
</package>
<package pkgid="d58d26d78eed6d1a1b8e7aeefc3032a4158cbb7f4817a62f62d9635861c366b2" name="iptables-debuginfo" arch="i686">
  <version epoch="0" ver="1.4.21" rel="18.2.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-11" date="1394452800">- Added missing "panic" action (RHBZ#1067670)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
</package>
<package pkgid="42953e2c92e5fb2e500b8ab595c3fa9612ed8621bb64f5edc808d4e8de4a2905" name="iptables-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.21" rel="18.2.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-11" date="1394452800">- Added missing "panic" action (RHBZ#1067670)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
</package>
<package pkgid="8099c6f0f8e66aeb69371c71f7a92ea3eece66845e8a7361fe84ed92ee72fe2f" name="iptables-debuginfo" arch="i686">
  <version epoch="0" ver="1.4.21" rel="18.3.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.3" date="1518523200">- Fix incorrect ip6tables.service unit syntax (RHBZ#1538549)</changelog>
</package>
<package pkgid="204085d71bc7ce5bb3797c211e60c5671508b7d3b257191a9fdf204fd10d95e9" name="iptables-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.21" rel="18.3.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.3" date="1518523200">- Fix incorrect ip6tables.service unit syntax (RHBZ#1538549)</changelog>
</package>
<package pkgid="6c9c63c9809a3d8d9279e1c02a0ed5cbe7ff8c12e43fe51dc148d505d21324c6" name="iptables-devel" arch="i686">
  <version epoch="0" ver="1.4.21" rel="18.2.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-11" date="1394452800">- Added missing "panic" action (RHBZ#1067670)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
</package>
<package pkgid="c0b05559163294a017083a09ca2c93f899b5558081a63ee590a48c47a66981de" name="iptables-devel" arch="x86_64">
  <version epoch="0" ver="1.4.21" rel="18.2.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-11" date="1394452800">- Added missing "panic" action (RHBZ#1067670)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
</package>
<package pkgid="72c6a622b0a27e446ec22412c80cfd924904bc4853516b46078e620bd15132a0" name="iptables-devel" arch="i686">
  <version epoch="0" ver="1.4.21" rel="18.3.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.3" date="1518523200">- Fix incorrect ip6tables.service unit syntax (RHBZ#1538549)</changelog>
</package>
<package pkgid="79bebd926629519ab27bb0e8f209be4972637abc7ad149131f53f5759c82f6cb" name="iptables-devel" arch="x86_64">
  <version epoch="0" ver="1.4.21" rel="18.3.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.3" date="1518523200">- Fix incorrect ip6tables.service unit syntax (RHBZ#1538549)</changelog>
</package>
<package pkgid="5869a6094991a28f11611f4a4b6022c3b36b44298db0001b144b7b68d3916dd7" name="iptables-services" arch="i686">
  <version epoch="0" ver="1.4.21" rel="18.2.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-11" date="1394452800">- Added missing "panic" action (RHBZ#1067670)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
</package>
<package pkgid="e8c379d8ea3a9a3f1d83c4a40bf7e2a99a956c503fff70e96dcb7e596be6c81e" name="iptables-services" arch="x86_64">
  <version epoch="0" ver="1.4.21" rel="18.2.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-11" date="1394452800">- Added missing "panic" action (RHBZ#1067670)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
</package>
<package pkgid="2512899ea01c1e60b799dd670ba78f10d851b58c12107672f03094c0d928d675" name="iptables-services" arch="i686">
  <version epoch="0" ver="1.4.21" rel="18.3.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.3" date="1518523200">- Fix incorrect ip6tables.service unit syntax (RHBZ#1538549)</changelog>
</package>
<package pkgid="1a2741f47402de506aac81bfd3da608538416e5cbf7b9827314f87ced947e300" name="iptables-services" arch="x86_64">
  <version epoch="0" ver="1.4.21" rel="18.3.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.3" date="1518523200">- Fix incorrect ip6tables.service unit syntax (RHBZ#1538549)</changelog>
</package>
<package pkgid="ce9951e144cf38f2404d7ff7e81455e6b712f92e08a73d99ceaf8974e218b1e1" name="iptables-utils" arch="i686">
  <version epoch="0" ver="1.4.21" rel="18.2.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-11" date="1394452800">- Added missing "panic" action (RHBZ#1067670)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
</package>
<package pkgid="cace88714e1ee413a4586aefc45c92f70a7adc237370812d6673545f28409957" name="iptables-utils" arch="x86_64">
  <version epoch="0" ver="1.4.21" rel="18.2.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-11" date="1394452800">- Added missing "panic" action (RHBZ#1067670)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
</package>
<package pkgid="08412acb6ee2e730b222f2bdd5a76a785880b9e3f6ef44c75b3c246b36c4f8f0" name="iptables-utils" arch="i686">
  <version epoch="0" ver="1.4.21" rel="18.3.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.3" date="1518523200">- Fix incorrect ip6tables.service unit syntax (RHBZ#1538549)</changelog>
</package>
<package pkgid="0e515ebeb214dbd12775d8c68a76935463bb83834b2a2dc0b033d0375b8d877e" name="iptables-utils" arch="x86_64">
  <version epoch="0" ver="1.4.21" rel="18.3.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.3" date="1518523200">- Fix incorrect ip6tables.service unit syntax (RHBZ#1538549)</changelog>
</package>
<package pkgid="cb29d7b809c575b63a32179a51d3b465910f4750ac06075b7a6033dd2c3739ba" name="ipxe" arch="src">
  <version epoch="0" ver="20170123" rel="1.git4e85b27.el7_4.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20130517-4.gitc4bce43" date="1392120000">- ipxe-Use-next-server-from-filename-s-settings-block.patch [bz#1062644]
- Resolves: bz#1062644
  (pxe boot fails if next-server details come from a different dhcp server)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20130517-5.gitc4bce43.el7" date="1394020800">- ipxe-Enable-infrastructure-to-specify-an-autoboot-device-.patch [bz#1031518]
- ipxe-Allow-prefix-to-specify-a-PCI-autoboot-device-locati.patch [bz#1031518]
- ipxe-Store-boot-bus-dev.fn-address-as-autoboot-device-loc.patch [bz#1031518]
- ipxe-Ignore-PCI-autoboot-device-location-if-set-to-00-00..patch [bz#1031518]
- ipxe-Revert-Remove-2-second-startup-wait.patch [bz#857123]
- ipxe-Allow-ROM-banner-timeout-to-be-configured-independen.patch [bz#857123]
- ipxe-Customize-ROM-banner-timeout.patch [bz#857123]
- Resolves: bz#1031518
  (iPXE does not honor specified boot device)
- Resolves: bz#857123
  (Guests never get an iPXE prompt)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20130517-6.gitc4bce43.el7" date="1410782400">- ipxe-import-EfiRom-from-edk2-BaseTools-RHEL-only.patch [bz#1084561]
- ipxe-add-custom-Makefile-for-EfiRom-RHEL-only.patch [bz#1084561]
- ipxe-redhat-build-and-install-combined-legacy-UEFI-roms-f.patch [bz#1084561]
- Resolves: bz#1084561
  (RFE: ship UEFI drivers for ipxe in RHEL-7.y)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-1.git6366fa7a.el7" date="1457524800">- Rebase to 6366fa7a
- Resolves: bz#1297853</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-2.git6366fa7a.el7" date="1468324800">- ipxe-Enable-IPv6-protocol-in-non-QEMU-builds.patch [bz#1350167]
- Resolves: bz#1350167
  (ipxe: enable IPV6)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-3.git6366fa7a.el7" date="1468584000">- ipxe-Add-pci_find_next_capability.patch [bz#1242850]
- ipxe-Add-virtio-1.0-constants-and-data-structures.patch [bz#1242850]
- ipxe-Add-virtio-1.0-PCI-support.patch [bz#1242850]
- ipxe-Add-virtio-net-1.0-support.patch [bz#1242850]
- ipxe-Renumber-virtio_pci_region-flags.patch [bz#1242850]
- ipxe-Fix-virtio-pci-logging.patch [bz#1242850]
- Resolves: bz#1242850
  (Ipxe can not recognize "network device" when enable virtio-1 of virtio-net-pci)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-4.git6366fa7a.el7" date="1470139200">- ipxe-Send-TCP-keepalives-on-idle-established-connections.patch [bz#1322056]
- ipxe-enable-e1000e-rom.patch [bz#1361534]
- Resolves: bz#1322056
  (ipxe freeze during HTTP download with last RPM)
- Resolves: bz#1361534
  (RFE: Integrate e1000e implementation in downstream QEMU)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-5.git6366fa7a.el7" date="1472731200">- ipxe-Strip-802.1Q-VLAN-0-priority-tags.patch [bz#1316329]
- Resolves: bz#1316329
  ([RFE] Properly Handle 8021.Q VID 0 Frames, as new vlan model in linux kernel does.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20170123-1.git4e85b27.el7" date="1489147200">- Rebase to commit 4e85b27 [bz#1413781]
- Resolves: bz#1413781
  (Rebase ipxe for RHEL-7.4)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20170123-1.git4e85b27.el7_4.1" date="1502971200">- ipxe-Support-VIRTIO_NET_F_IOMMU_PLATFORM.patch [bz#1481180]
- Resolves: bz#1481180
  (iommu platform support for ipxe [rhel-7.4.z])</changelog>
</package>
<package pkgid="b200b851eba7cff92071ad42a171d5e4b6221cb11295319ecf6fcdaadea1da0c" name="ipxe" arch="src">
  <version epoch="0" ver="20170123" rel="1.git4e85b27.el7_4.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20130517-4.gitc4bce43" date="1392120000">- ipxe-Use-next-server-from-filename-s-settings-block.patch [bz#1062644]
- Resolves: bz#1062644
  (pxe boot fails if next-server details come from a different dhcp server)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20130517-5.gitc4bce43.el7" date="1394020800">- ipxe-Enable-infrastructure-to-specify-an-autoboot-device-.patch [bz#1031518]
- ipxe-Allow-prefix-to-specify-a-PCI-autoboot-device-locati.patch [bz#1031518]
- ipxe-Store-boot-bus-dev.fn-address-as-autoboot-device-loc.patch [bz#1031518]
- ipxe-Ignore-PCI-autoboot-device-location-if-set-to-00-00..patch [bz#1031518]
- ipxe-Revert-Remove-2-second-startup-wait.patch [bz#857123]
- ipxe-Allow-ROM-banner-timeout-to-be-configured-independen.patch [bz#857123]
- ipxe-Customize-ROM-banner-timeout.patch [bz#857123]
- Resolves: bz#1031518
  (iPXE does not honor specified boot device)
- Resolves: bz#857123
  (Guests never get an iPXE prompt)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20130517-6.gitc4bce43.el7" date="1410782400">- ipxe-import-EfiRom-from-edk2-BaseTools-RHEL-only.patch [bz#1084561]
- ipxe-add-custom-Makefile-for-EfiRom-RHEL-only.patch [bz#1084561]
- ipxe-redhat-build-and-install-combined-legacy-UEFI-roms-f.patch [bz#1084561]
- Resolves: bz#1084561
  (RFE: ship UEFI drivers for ipxe in RHEL-7.y)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-1.git6366fa7a.el7" date="1457524800">- Rebase to 6366fa7a
- Resolves: bz#1297853</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-2.git6366fa7a.el7" date="1468324800">- ipxe-Enable-IPv6-protocol-in-non-QEMU-builds.patch [bz#1350167]
- Resolves: bz#1350167
  (ipxe: enable IPV6)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-3.git6366fa7a.el7" date="1468584000">- ipxe-Add-pci_find_next_capability.patch [bz#1242850]
- ipxe-Add-virtio-1.0-constants-and-data-structures.patch [bz#1242850]
- ipxe-Add-virtio-1.0-PCI-support.patch [bz#1242850]
- ipxe-Add-virtio-net-1.0-support.patch [bz#1242850]
- ipxe-Renumber-virtio_pci_region-flags.patch [bz#1242850]
- ipxe-Fix-virtio-pci-logging.patch [bz#1242850]
- Resolves: bz#1242850
  (Ipxe can not recognize "network device" when enable virtio-1 of virtio-net-pci)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-4.git6366fa7a.el7" date="1470139200">- ipxe-Send-TCP-keepalives-on-idle-established-connections.patch [bz#1322056]
- ipxe-enable-e1000e-rom.patch [bz#1361534]
- Resolves: bz#1322056
  (ipxe freeze during HTTP download with last RPM)
- Resolves: bz#1361534
  (RFE: Integrate e1000e implementation in downstream QEMU)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-5.git6366fa7a.el7" date="1472731200">- ipxe-Strip-802.1Q-VLAN-0-priority-tags.patch [bz#1316329]
- Resolves: bz#1316329
  ([RFE] Properly Handle 8021.Q VID 0 Frames, as new vlan model in linux kernel does.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20170123-1.git4e85b27.el7" date="1489147200">- Rebase to commit 4e85b27 [bz#1413781]
- Resolves: bz#1413781
  (Rebase ipxe for RHEL-7.4)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20170123-1.git4e85b27.el7_4.1" date="1502971200">- ipxe-Support-VIRTIO_NET_F_IOMMU_PLATFORM.patch [bz#1481180]
- Resolves: bz#1481180
  (iommu platform support for ipxe [rhel-7.4.z])</changelog>
</package>
<package pkgid="e674eeb7aed02cdb626b3375d45ffba129d0c8dd1284b891210f4856f89f0cdb" name="ipxe-bootimgs" arch="noarch">
  <version epoch="0" ver="20170123" rel="1.git4e85b27.el7_4.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20130517-4.gitc4bce43" date="1392120000">- ipxe-Use-next-server-from-filename-s-settings-block.patch [bz#1062644]
- Resolves: bz#1062644
  (pxe boot fails if next-server details come from a different dhcp server)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20130517-5.gitc4bce43.el7" date="1394020800">- ipxe-Enable-infrastructure-to-specify-an-autoboot-device-.patch [bz#1031518]
- ipxe-Allow-prefix-to-specify-a-PCI-autoboot-device-locati.patch [bz#1031518]
- ipxe-Store-boot-bus-dev.fn-address-as-autoboot-device-loc.patch [bz#1031518]
- ipxe-Ignore-PCI-autoboot-device-location-if-set-to-00-00..patch [bz#1031518]
- ipxe-Revert-Remove-2-second-startup-wait.patch [bz#857123]
- ipxe-Allow-ROM-banner-timeout-to-be-configured-independen.patch [bz#857123]
- ipxe-Customize-ROM-banner-timeout.patch [bz#857123]
- Resolves: bz#1031518
  (iPXE does not honor specified boot device)
- Resolves: bz#857123
  (Guests never get an iPXE prompt)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20130517-6.gitc4bce43.el7" date="1410782400">- ipxe-import-EfiRom-from-edk2-BaseTools-RHEL-only.patch [bz#1084561]
- ipxe-add-custom-Makefile-for-EfiRom-RHEL-only.patch [bz#1084561]
- ipxe-redhat-build-and-install-combined-legacy-UEFI-roms-f.patch [bz#1084561]
- Resolves: bz#1084561
  (RFE: ship UEFI drivers for ipxe in RHEL-7.y)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-1.git6366fa7a.el7" date="1457524800">- Rebase to 6366fa7a
- Resolves: bz#1297853</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-2.git6366fa7a.el7" date="1468324800">- ipxe-Enable-IPv6-protocol-in-non-QEMU-builds.patch [bz#1350167]
- Resolves: bz#1350167
  (ipxe: enable IPV6)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-3.git6366fa7a.el7" date="1468584000">- ipxe-Add-pci_find_next_capability.patch [bz#1242850]
- ipxe-Add-virtio-1.0-constants-and-data-structures.patch [bz#1242850]
- ipxe-Add-virtio-1.0-PCI-support.patch [bz#1242850]
- ipxe-Add-virtio-net-1.0-support.patch [bz#1242850]
- ipxe-Renumber-virtio_pci_region-flags.patch [bz#1242850]
- ipxe-Fix-virtio-pci-logging.patch [bz#1242850]
- Resolves: bz#1242850
  (Ipxe can not recognize "network device" when enable virtio-1 of virtio-net-pci)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-4.git6366fa7a.el7" date="1470139200">- ipxe-Send-TCP-keepalives-on-idle-established-connections.patch [bz#1322056]
- ipxe-enable-e1000e-rom.patch [bz#1361534]
- Resolves: bz#1322056
  (ipxe freeze during HTTP download with last RPM)
- Resolves: bz#1361534
  (RFE: Integrate e1000e implementation in downstream QEMU)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-5.git6366fa7a.el7" date="1472731200">- ipxe-Strip-802.1Q-VLAN-0-priority-tags.patch [bz#1316329]
- Resolves: bz#1316329
  ([RFE] Properly Handle 8021.Q VID 0 Frames, as new vlan model in linux kernel does.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20170123-1.git4e85b27.el7" date="1489147200">- Rebase to commit 4e85b27 [bz#1413781]
- Resolves: bz#1413781
  (Rebase ipxe for RHEL-7.4)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20170123-1.git4e85b27.el7_4.1" date="1502971200">- ipxe-Support-VIRTIO_NET_F_IOMMU_PLATFORM.patch [bz#1481180]
- Resolves: bz#1481180
  (iommu platform support for ipxe [rhel-7.4.z])</changelog>
</package>
<package pkgid="720fa8bb6c5fd2e37a2667ffb65c4a0ea350c7b00e831041826759920fb6f606" name="ipxe-roms" arch="noarch">
  <version epoch="0" ver="20170123" rel="1.git4e85b27.el7_4.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20130517-4.gitc4bce43" date="1392120000">- ipxe-Use-next-server-from-filename-s-settings-block.patch [bz#1062644]
- Resolves: bz#1062644
  (pxe boot fails if next-server details come from a different dhcp server)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20130517-5.gitc4bce43.el7" date="1394020800">- ipxe-Enable-infrastructure-to-specify-an-autoboot-device-.patch [bz#1031518]
- ipxe-Allow-prefix-to-specify-a-PCI-autoboot-device-locati.patch [bz#1031518]
- ipxe-Store-boot-bus-dev.fn-address-as-autoboot-device-loc.patch [bz#1031518]
- ipxe-Ignore-PCI-autoboot-device-location-if-set-to-00-00..patch [bz#1031518]
- ipxe-Revert-Remove-2-second-startup-wait.patch [bz#857123]
- ipxe-Allow-ROM-banner-timeout-to-be-configured-independen.patch [bz#857123]
- ipxe-Customize-ROM-banner-timeout.patch [bz#857123]
- Resolves: bz#1031518
  (iPXE does not honor specified boot device)
- Resolves: bz#857123
  (Guests never get an iPXE prompt)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20130517-6.gitc4bce43.el7" date="1410782400">- ipxe-import-EfiRom-from-edk2-BaseTools-RHEL-only.patch [bz#1084561]
- ipxe-add-custom-Makefile-for-EfiRom-RHEL-only.patch [bz#1084561]
- ipxe-redhat-build-and-install-combined-legacy-UEFI-roms-f.patch [bz#1084561]
- Resolves: bz#1084561
  (RFE: ship UEFI drivers for ipxe in RHEL-7.y)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-1.git6366fa7a.el7" date="1457524800">- Rebase to 6366fa7a
- Resolves: bz#1297853</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-2.git6366fa7a.el7" date="1468324800">- ipxe-Enable-IPv6-protocol-in-non-QEMU-builds.patch [bz#1350167]
- Resolves: bz#1350167
  (ipxe: enable IPV6)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-3.git6366fa7a.el7" date="1468584000">- ipxe-Add-pci_find_next_capability.patch [bz#1242850]
- ipxe-Add-virtio-1.0-constants-and-data-structures.patch [bz#1242850]
- ipxe-Add-virtio-1.0-PCI-support.patch [bz#1242850]
- ipxe-Add-virtio-net-1.0-support.patch [bz#1242850]
- ipxe-Renumber-virtio_pci_region-flags.patch [bz#1242850]
- ipxe-Fix-virtio-pci-logging.patch [bz#1242850]
- Resolves: bz#1242850
  (Ipxe can not recognize "network device" when enable virtio-1 of virtio-net-pci)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-4.git6366fa7a.el7" date="1470139200">- ipxe-Send-TCP-keepalives-on-idle-established-connections.patch [bz#1322056]
- ipxe-enable-e1000e-rom.patch [bz#1361534]
- Resolves: bz#1322056
  (ipxe freeze during HTTP download with last RPM)
- Resolves: bz#1361534
  (RFE: Integrate e1000e implementation in downstream QEMU)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-5.git6366fa7a.el7" date="1472731200">- ipxe-Strip-802.1Q-VLAN-0-priority-tags.patch [bz#1316329]
- Resolves: bz#1316329
  ([RFE] Properly Handle 8021.Q VID 0 Frames, as new vlan model in linux kernel does.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20170123-1.git4e85b27.el7" date="1489147200">- Rebase to commit 4e85b27 [bz#1413781]
- Resolves: bz#1413781
  (Rebase ipxe for RHEL-7.4)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20170123-1.git4e85b27.el7_4.1" date="1502971200">- ipxe-Support-VIRTIO_NET_F_IOMMU_PLATFORM.patch [bz#1481180]
- Resolves: bz#1481180
  (iommu platform support for ipxe [rhel-7.4.z])</changelog>
</package>
<package pkgid="3e45f428735ea0dcc02b77eefe77105211ae4531fa15b7ec85b4b8409ed4f13c" name="ipxe-roms-qemu" arch="noarch">
  <version epoch="0" ver="20170123" rel="1.git4e85b27.el7_4.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20130517-4.gitc4bce43" date="1392120000">- ipxe-Use-next-server-from-filename-s-settings-block.patch [bz#1062644]
- Resolves: bz#1062644
  (pxe boot fails if next-server details come from a different dhcp server)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20130517-5.gitc4bce43.el7" date="1394020800">- ipxe-Enable-infrastructure-to-specify-an-autoboot-device-.patch [bz#1031518]
- ipxe-Allow-prefix-to-specify-a-PCI-autoboot-device-locati.patch [bz#1031518]
- ipxe-Store-boot-bus-dev.fn-address-as-autoboot-device-loc.patch [bz#1031518]
- ipxe-Ignore-PCI-autoboot-device-location-if-set-to-00-00..patch [bz#1031518]
- ipxe-Revert-Remove-2-second-startup-wait.patch [bz#857123]
- ipxe-Allow-ROM-banner-timeout-to-be-configured-independen.patch [bz#857123]
- ipxe-Customize-ROM-banner-timeout.patch [bz#857123]
- Resolves: bz#1031518
  (iPXE does not honor specified boot device)
- Resolves: bz#857123
  (Guests never get an iPXE prompt)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20130517-6.gitc4bce43.el7" date="1410782400">- ipxe-import-EfiRom-from-edk2-BaseTools-RHEL-only.patch [bz#1084561]
- ipxe-add-custom-Makefile-for-EfiRom-RHEL-only.patch [bz#1084561]
- ipxe-redhat-build-and-install-combined-legacy-UEFI-roms-f.patch [bz#1084561]
- Resolves: bz#1084561
  (RFE: ship UEFI drivers for ipxe in RHEL-7.y)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-1.git6366fa7a.el7" date="1457524800">- Rebase to 6366fa7a
- Resolves: bz#1297853</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-2.git6366fa7a.el7" date="1468324800">- ipxe-Enable-IPv6-protocol-in-non-QEMU-builds.patch [bz#1350167]
- Resolves: bz#1350167
  (ipxe: enable IPV6)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-3.git6366fa7a.el7" date="1468584000">- ipxe-Add-pci_find_next_capability.patch [bz#1242850]
- ipxe-Add-virtio-1.0-constants-and-data-structures.patch [bz#1242850]
- ipxe-Add-virtio-1.0-PCI-support.patch [bz#1242850]
- ipxe-Add-virtio-net-1.0-support.patch [bz#1242850]
- ipxe-Renumber-virtio_pci_region-flags.patch [bz#1242850]
- ipxe-Fix-virtio-pci-logging.patch [bz#1242850]
- Resolves: bz#1242850
  (Ipxe can not recognize "network device" when enable virtio-1 of virtio-net-pci)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-4.git6366fa7a.el7" date="1470139200">- ipxe-Send-TCP-keepalives-on-idle-established-connections.patch [bz#1322056]
- ipxe-enable-e1000e-rom.patch [bz#1361534]
- Resolves: bz#1322056
  (ipxe freeze during HTTP download with last RPM)
- Resolves: bz#1361534
  (RFE: Integrate e1000e implementation in downstream QEMU)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20160127-5.git6366fa7a.el7" date="1472731200">- ipxe-Strip-802.1Q-VLAN-0-priority-tags.patch [bz#1316329]
- Resolves: bz#1316329
  ([RFE] Properly Handle 8021.Q VID 0 Frames, as new vlan model in linux kernel does.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20170123-1.git4e85b27.el7" date="1489147200">- Rebase to commit 4e85b27 [bz#1413781]
- Resolves: bz#1413781
  (Rebase ipxe for RHEL-7.4)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20170123-1.git4e85b27.el7_4.1" date="1502971200">- ipxe-Support-VIRTIO_NET_F_IOMMU_PLATFORM.patch [bz#1481180]
- Resolves: bz#1481180
  (iommu platform support for ipxe [rhel-7.4.z])</changelog>
</package>
<package pkgid="b4ed2a9e3daea3aa0fe2e936baac766fe3011d25790c386c983d9f31fecd6bcd" name="iwl100-firmware" arch="noarch">
  <version epoch="0" ver="39.31.5.1" rel="57.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="3ad603580210e7076553a8711f83a7deacb34fc240af1326dae987ca7b0f2477" name="iwl100-firmware" arch="noarch">
  <version epoch="0" ver="39.31.5.1" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="d14f380588a57373c6a60a949afffaf295bc5ba0c09eca54b54619b8f4683d40" name="iwl100-firmware" arch="noarch">
  <version epoch="0" ver="39.31.5.1" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="d9b8e470e7ed1158f497f35e855436cbcdc227bb1867c443203bb1ac72518ceb" name="iwl1000-firmware" arch="noarch">
  <version epoch="1" ver="39.31.5.1" rel="57.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="6cc81bb162e0b4f73af098faf54d6e5680727548ef8f41d610955bb9f9007861" name="iwl1000-firmware" arch="noarch">
  <version epoch="1" ver="39.31.5.1" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="72ded11ef7d7961c70d1299f290ed25fe0f6961d6b352422950f3e38b8d86b50" name="iwl1000-firmware" arch="noarch">
  <version epoch="1" ver="39.31.5.1" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="8847db2a4f04d0d77bf5bb84e729f922b51784323f01ffa5116665f368ffeec7" name="iwl105-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="57.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="e114c538efd602803a51966ec0c8f46de722e16a3f55e6002c96b19e98b82b05" name="iwl105-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="3468da71e921708a9796971daa46798ec6ba10abda35e5c0d3b8a20bab57864c" name="iwl105-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="1aadd2fd0ae71ae87a77456ffb357be44a0f563acd0188f9157be7d75374c348" name="iwl135-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="57.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="7e22f771abd439415490c217a91f2b91b85013b26ffd5b6923c811a5bcb4598a" name="iwl135-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="436c2b37340fd6db27eb48606eee6731912beabc4dfbda7c8251ebfe705eafbd" name="iwl135-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="29bb73d0a0c48aa79bd3095b90e1c536748218c200e35466ab4c4d79b5f6ee49" name="iwl2000-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="57.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="957083b33ba32d11dd8847e2b56d04d27d39cd1395cdd42f1640a1fa3c77438e" name="iwl2000-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="6eb6127546794246b2ce4ad1d58c0edeb3d858c88f1bc5fe8e1020e7dd9d7204" name="iwl2000-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="d5fbdcc94c5d9712d77b9d524272a48973bf233929ad22d7cd061483d0820c1a" name="iwl2030-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="57.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="aaa610b8ddc86c89fd4d68d585d0d0010a5c7e581cf23a1f98dfd9a8a0c199b9" name="iwl2030-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="df1249ffd0b9a4772ac8d08ed46491a7dc281c75522fabd3af02ecade5fec4cc" name="iwl2030-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="6e5c05176302676386b414253d084a1a53bb898616a8e943eadea143e91c4db4" name="iwl3160-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="57.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="17b0b9285a028cbedbdf6661806cac99a40c6c6a0afa53a04bd5abf546a3d145" name="iwl3160-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="1e6dc4038a5e6812b88c0f39ca65c43c81fe7b60ec1c16151851e7989151c0bb" name="iwl3160-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="77959c092829b4021a4f2c11f6a405f607e24e342f81408a1a623cfc4cb15ca3" name="iwl3945-firmware" arch="noarch">
  <version epoch="0" ver="15.32.2.9" rel="57.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="8556812b5259050847524323e8a68f33f47b92ffdaa6e09827d617cdb33fcc12" name="iwl3945-firmware" arch="noarch">
  <version epoch="0" ver="15.32.2.9" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="958621efbb3e828a16f698efea6cc80666337f6e275c2c7d185a32093c717b98" name="iwl3945-firmware" arch="noarch">
  <version epoch="0" ver="15.32.2.9" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="b172cc6894aee3c989cb0a1a77beb602c34db5ffa657fc2ce79d118ad1562e2d" name="iwl4965-firmware" arch="noarch">
  <version epoch="0" ver="228.61.2.24" rel="57.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="f07ed6fff08e9a0cee8b11a1d96ee100cffc5092ffba304295f052619e0b5746" name="iwl4965-firmware" arch="noarch">
  <version epoch="0" ver="228.61.2.24" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="b23f3a413072cbc6d93554e54b45bce4f9472547d64a92373e5d4a99b6138735" name="iwl4965-firmware" arch="noarch">
  <version epoch="0" ver="228.61.2.24" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="2d7f6294a2b4036c0b6ec76355cc70ebbb07ae795bce25b850c616c39b208836" name="iwl5000-firmware" arch="noarch">
  <version epoch="0" ver="8.83.5.1_1" rel="57.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="9b99cbeb86785c8610bd40c75bef2b33ef1504678b21520779a4947320a18173" name="iwl5000-firmware" arch="noarch">
  <version epoch="0" ver="8.83.5.1_1" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="d80b10bc25e8c110033fbe614ef734ef585a616ebec1c4e793b0cb4944f3840c" name="iwl5000-firmware" arch="noarch">
  <version epoch="0" ver="8.83.5.1_1" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="fbbd1fe8e0a753baf358ef24fe8ee70a300689f0ed796751727d11c5a3c3de01" name="iwl5150-firmware" arch="noarch">
  <version epoch="0" ver="8.24.2.2" rel="57.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="03ef8fe121418eed83e8ec9cf92e8c73e48d37898b472f408113568d3ad0b876" name="iwl5150-firmware" arch="noarch">
  <version epoch="0" ver="8.24.2.2" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="6239dee836cf47cf071f20a79bd01f58cd9b75defde2a23b76d5ec39d0b5792f" name="iwl5150-firmware" arch="noarch">
  <version epoch="0" ver="8.24.2.2" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="fef89f50288e4416e504fb36280e6d60db1ddb4d04ae4088757d4be3ecbf547c" name="iwl6000-firmware" arch="noarch">
  <version epoch="0" ver="9.221.4.1" rel="57.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="851ad8b662f90a6f06b520c6513f2c0f20c1b57da0e53c23eb8d2e4993ad3b13" name="iwl6000-firmware" arch="noarch">
  <version epoch="0" ver="9.221.4.1" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="cb34847a690a2f3eef6a723a52c4cf9b76827884aab7f829c5d2e8166d23fa8b" name="iwl6000-firmware" arch="noarch">
  <version epoch="0" ver="9.221.4.1" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="412e16f6194b7205d57e111efc5fe9663dab1918d772dfff418cc4754c9ab086" name="iwl6000g2a-firmware" arch="noarch">
  <version epoch="0" ver="17.168.5.3" rel="57.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="ce306b3c30056a79f8b345882453721f964bfd0a075fcc8d6ebcbd7ecd88ae22" name="iwl6000g2a-firmware" arch="noarch">
  <version epoch="0" ver="17.168.5.3" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="f6e5480342318a9bab578e1b3bcf782336b0fba7310a347549e4e73f7de67a35" name="iwl6000g2a-firmware" arch="noarch">
  <version epoch="0" ver="17.168.5.3" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="dd9b11697f6451ae9ef49f7a4cd786add88cb0516c6dc4668d14be848bf731b0" name="iwl6000g2b-firmware" arch="noarch">
  <version epoch="0" ver="17.168.5.2" rel="57.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="c2e9ce565993fc8720ea03e9c9ef371143747d5ad5a4fdd14f6d0b6821fcf1bc" name="iwl6000g2b-firmware" arch="noarch">
  <version epoch="0" ver="17.168.5.2" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="d456aafbc355352425df9c02b7a18378bd28529405728270861cf7c151a369fe" name="iwl6000g2b-firmware" arch="noarch">
  <version epoch="0" ver="17.168.5.2" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="888df30bb764f730af0fbbcea7e9364f1ea9d006129d32dab445479e6ca3cdc1" name="iwl6050-firmware" arch="noarch">
  <version epoch="0" ver="41.28.5.1" rel="57.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="1c68dd29abd3b79b07773ed1bf823e904f534e8ca33bf8eb11f2ab05aec6ccfc" name="iwl6050-firmware" arch="noarch">
  <version epoch="0" ver="41.28.5.1" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="29bbc37c329e67bb90f9cdccfbc808710795a706085951f40bb8450b7f6ebddd" name="iwl6050-firmware" arch="noarch">
  <version epoch="0" ver="41.28.5.1" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="07d8c53730ccbb2a065fb6918a917cf6773ba3ed5505f40383b6c9d7de071dc6" name="iwl7260-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="57.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="e65c15690c9edfa6957a6981f49cdc6e6a2a878cc456087f4c872fcd39f2ff4e" name="iwl7260-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="7ff372c2e5b822aea78412f33dc67158d300aa5ce38203e636f78f7c35969092" name="iwl7260-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="f86399024d6d2c4cd6b04c369bd94e61c983a8e915b9e65899d315669034eb39" name="iwl7265-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="57.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="db8b3e0fb0f5fa66037f656cbdc9613e72d20e9d2bfe279b7079e229607b6465" name="iwl7265-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="4a0799e2e68a1a9daa7dafb501989d42aba8717964f91b691b5499d0942a96a1" name="iwl7265-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="58.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="a50b8a123aa05c9e0b98a0ff6f89b9756d623b5a05a401b91f58896d0494fa09" name="java-1.7.0-openjdk" arch="i686">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.1.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.2" date="1491307200">- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
- Update jstack tapset to handle AArch64
- Handle unsupported architectures by calling the error function rather than a parse failure
- ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
- Resolves: rhbz#1373986</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.3" date="1491393600">- Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1422738</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294400">- Bump to 2.6.10 and u141b00.
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Update md5sum list with checksum for the new java.security file.
- Drop 8173783 backport which is now applied upstream.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294401">- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.2" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="d35f0360e0ff8367d75c639c796e3197949b7b578d8f725ca4ec39e5a2a884be" name="java-1.7.0-openjdk" arch="src">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.1.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.2" date="1491307200">- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
- Update jstack tapset to handle AArch64
- Handle unsupported architectures by calling the error function rather than a parse failure
- ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
- Resolves: rhbz#1373986</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.3" date="1491393600">- Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1422738</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294400">- Bump to 2.6.10 and u141b00.
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Update md5sum list with checksum for the new java.security file.
- Drop 8173783 backport which is now applied upstream.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294401">- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.2" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="2e297c25f5f5ecfedb3aacbdc87e71e23c6c5f2927e1222c546ac6cd52c2a89f" name="java-1.7.0-openjdk" arch="src">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.1.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.2" date="1491307200">- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
- Update jstack tapset to handle AArch64
- Handle unsupported architectures by calling the error function rather than a parse failure
- ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
- Resolves: rhbz#1373986</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.3" date="1491393600">- Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1422738</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294400">- Bump to 2.6.10 and u141b00.
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Update md5sum list with checksum for the new java.security file.
- Drop 8173783 backport which is now applied upstream.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294401">- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.2" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="25c9092e6c3367d3c8d8fc85966ce8221a3bef7de5892e09ba80f5b9ea63ef04" name="java-1.7.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.1.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.2" date="1491307200">- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
- Update jstack tapset to handle AArch64
- Handle unsupported architectures by calling the error function rather than a parse failure
- ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
- Resolves: rhbz#1373986</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.3" date="1491393600">- Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1422738</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294400">- Bump to 2.6.10 and u141b00.
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Update md5sum list with checksum for the new java.security file.
- Drop 8173783 backport which is now applied upstream.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294401">- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.2" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="11233c2662762463a4245937d75444fca4b1e74e250d308af8e73515165bb068" name="java-1.7.0-openjdk" arch="i686">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="a46f9f16764aa1adda916337205b33fec2735dce859d032ad4c007ff1d3bb0e7" name="java-1.7.0-openjdk" arch="src">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="9478bec119c4e4ea9029dc8547d93f01eb4722e3bfeed0f14cfbb2e18361fce6" name="java-1.7.0-openjdk" arch="src">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="463228c2ec9cdf0b5bedbfcca76f6b0fa2339288d6eca6fe8eb91416370e377a" name="java-1.7.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="89bc2e18feb052d771fce5d3c759c786a829da506927bd7f7350b9878e67fff7" name="java-1.7.0-openjdk" arch="i686">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="d2b80daff9a55f1b80b8054988fa1b0c06c05ad215ffd5b97afb813b8afded72" name="java-1.7.0-openjdk" arch="src">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="fc1f42b698886fcd5767c5936501b0c74f54e5ee6199bd1f9d0f69e763d60146" name="java-1.7.0-openjdk" arch="src">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="b8123d27d49c901d4ec783079340d70b5417c9994fc14c18ce6d9f3932d42563" name="java-1.7.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="3e58d0ac873d237af74e402862003f5695a9b8de2d20d975b8699285855f342c" name="java-1.7.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.1.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.2" date="1491307200">- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
- Update jstack tapset to handle AArch64
- Handle unsupported architectures by calling the error function rather than a parse failure
- ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
- Resolves: rhbz#1373986</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.3" date="1491393600">- Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1422738</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294400">- Bump to 2.6.10 and u141b00.
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Update md5sum list with checksum for the new java.security file.
- Drop 8173783 backport which is now applied upstream.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294401">- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.2" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="245e45dedeb8bfd4313c6cc0ff874b94ab176303cbc5a11704cedbebbf6fd1a2" name="java-1.7.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.1.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.2" date="1491307200">- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
- Update jstack tapset to handle AArch64
- Handle unsupported architectures by calling the error function rather than a parse failure
- ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
- Resolves: rhbz#1373986</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.3" date="1491393600">- Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1422738</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294400">- Bump to 2.6.10 and u141b00.
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Update md5sum list with checksum for the new java.security file.
- Drop 8173783 backport which is now applied upstream.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294401">- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.2" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="5691020d924a54eb208d6ecfeb5b9e0a75d512da75b7ed3499ceae6499440312" name="java-1.7.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="1b53dcef09e508c93e482816beafd144daa167d08dc9d31b163413557d5ddced" name="java-1.7.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="ebf4768ec7d02ce207e93206fc179ca0041e0c3a7c65ffcd7e4e92b99c2f35ad" name="java-1.7.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="2b49ba7778d30e8fd51ddd16b2eb7668acc8e3fe2926aece58c205be2abc3e8c" name="java-1.7.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="f23507cd5085d9d92272583f772affa644333e306c38930414d58aca708556d1" name="java-1.7.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.1.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.2" date="1491307200">- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
- Update jstack tapset to handle AArch64
- Handle unsupported architectures by calling the error function rather than a parse failure
- ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
- Resolves: rhbz#1373986</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.3" date="1491393600">- Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1422738</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294400">- Bump to 2.6.10 and u141b00.
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Update md5sum list with checksum for the new java.security file.
- Drop 8173783 backport which is now applied upstream.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294401">- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.2" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="d84f4ce8f00de50c2897089ededa43f446b90529bd50aca22bc18a8fc80ee021" name="java-1.7.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.1.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.2" date="1491307200">- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
- Update jstack tapset to handle AArch64
- Handle unsupported architectures by calling the error function rather than a parse failure
- ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
- Resolves: rhbz#1373986</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.3" date="1491393600">- Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1422738</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294400">- Bump to 2.6.10 and u141b00.
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Update md5sum list with checksum for the new java.security file.
- Drop 8173783 backport which is now applied upstream.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294401">- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.2" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="4ca27c923bee7bf02ee9d2a64da63a800edc80de631b49574d14ac05b0d7e95b" name="java-1.7.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="5f0ad2e25620dee0ae1079d808a2290c998528ba298dc95f5132b75409e16967" name="java-1.7.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="cb6284e2b0e6a75a1834b35c263bce5f25159ba46e06c60f67d2e72b265cf244" name="java-1.7.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="a888d68ff550f4ffe7587de137044ab276617cff19bc306bfbe3e4a7482cdda9" name="java-1.7.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="9c13bc8bf90fad84471fecb91f7eccdba50e20c86d17117e9f2daf94f2af8ab6" name="java-1.7.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.1.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.2" date="1491307200">- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
- Update jstack tapset to handle AArch64
- Handle unsupported architectures by calling the error function rather than a parse failure
- ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
- Resolves: rhbz#1373986</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.3" date="1491393600">- Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1422738</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294400">- Bump to 2.6.10 and u141b00.
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Update md5sum list with checksum for the new java.security file.
- Drop 8173783 backport which is now applied upstream.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294401">- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.2" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="8d63bb011cb3cc25ffb480c3985ef40799a89389248ebcc5dfa3d4625e4996ac" name="java-1.7.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.1.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.2" date="1491307200">- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
- Update jstack tapset to handle AArch64
- Handle unsupported architectures by calling the error function rather than a parse failure
- ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
- Resolves: rhbz#1373986</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.3" date="1491393600">- Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1422738</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294400">- Bump to 2.6.10 and u141b00.
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Update md5sum list with checksum for the new java.security file.
- Drop 8173783 backport which is now applied upstream.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294401">- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.2" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="96ac4ffce7bcce574c7e8066729997f89dc6f03ac90896cd8641a8008bb2660c" name="java-1.7.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="279408bdfeb2fb68714531bd0259641a688b9884080e1f1084b1311aceccc300" name="java-1.7.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="3b3b4f5ac8c36e14ba1ab4564afc2de82c179c845a9e88e11e34c33f2e3a9df5" name="java-1.7.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="0c068e66e78428d7c4c9dced475dcd9ec8e4cc4ab7953c23b948ebb6d896cc65" name="java-1.7.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="0e86ace37ba77067ea236034d7c44ff18b88ce512a053ed7def47acc53c5b25c" name="java-1.7.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.1.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.2" date="1491307200">- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
- Update jstack tapset to handle AArch64
- Handle unsupported architectures by calling the error function rather than a parse failure
- ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
- Resolves: rhbz#1373986</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.3" date="1491393600">- Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1422738</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294400">- Bump to 2.6.10 and u141b00.
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Update md5sum list with checksum for the new java.security file.
- Drop 8173783 backport which is now applied upstream.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294401">- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.2" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="8f1cc1054702940fe3cc38034e212ff207baa8093054e94d0045540a4ec46490" name="java-1.7.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.1.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.2" date="1491307200">- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
- Update jstack tapset to handle AArch64
- Handle unsupported architectures by calling the error function rather than a parse failure
- ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
- Resolves: rhbz#1373986</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.3" date="1491393600">- Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1422738</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294400">- Bump to 2.6.10 and u141b00.
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Update md5sum list with checksum for the new java.security file.
- Drop 8173783 backport which is now applied upstream.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294401">- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.2" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="bb92e7b2134dab3a02042b304e81554413a4aceb8cbdd2a07fc054f2b7fc2457" name="java-1.7.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="71283449917b78a9435d3eb5661423d6f60c0851e1ad07211c57861a5bc5d6e3" name="java-1.7.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="dec95f372ab9e462ed55274b0066066309e489e3018912c520cbc1ffc874cc22" name="java-1.7.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="fb50b578fa700c7261821754ccf40a0b8ab762f839a51e1a5a3acde7e54ad8fc" name="java-1.7.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="6f5c0f3b9c766b57933c4f92afa516555a35f6ade8e8ef23f4fbd1ab0f40a21e" name="java-1.7.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.1.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.2" date="1491307200">- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
- Update jstack tapset to handle AArch64
- Handle unsupported architectures by calling the error function rather than a parse failure
- ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
- Resolves: rhbz#1373986</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.3" date="1491393600">- Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1422738</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294400">- Bump to 2.6.10 and u141b00.
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Update md5sum list with checksum for the new java.security file.
- Drop 8173783 backport which is now applied upstream.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294401">- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.2" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="e3849b225f23d70d3e954833a030b07d5a1c41d644354224a1563ef6fc12de88" name="java-1.7.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.1.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.2" date="1491307200">- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
- Update jstack tapset to handle AArch64
- Handle unsupported architectures by calling the error function rather than a parse failure
- ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
- Resolves: rhbz#1373986</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.3" date="1491393600">- Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1422738</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294400">- Bump to 2.6.10 and u141b00.
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Update md5sum list with checksum for the new java.security file.
- Drop 8173783 backport which is now applied upstream.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294401">- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.2" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="eba98db3359ea468a9b4430b47bf9116de427e92afa0fea2896830ee4f7195b5" name="java-1.7.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="2eec8a53dd3b8464348d9bfb5196722181741fdbe50985fa8e1c953c32015d56" name="java-1.7.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="0b59fc74ed83e85c28e7f0d96eeb97ca9da3041ee5fe7d56d5d2616e05bfc95c" name="java-1.7.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="ab54d3b6099c06b9401ca5cee77e34030d6a6393b369575cd2797fc8d22d2fb2" name="java-1.7.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="0be01bab64a3b3e3b98754db7e85cfdb5574edcd17a42ff68ebf5bf9ac4d8182" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.1.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.2" date="1491307200">- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
- Update jstack tapset to handle AArch64
- Handle unsupported architectures by calling the error function rather than a parse failure
- ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
- Resolves: rhbz#1373986</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.3" date="1491393600">- Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1422738</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294400">- Bump to 2.6.10 and u141b00.
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Update md5sum list with checksum for the new java.security file.
- Drop 8173783 backport which is now applied upstream.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294401">- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.2" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="c58c018cdc42b73a678ee70c8b9b89893f9775d64a52e136b7ab7baff13d2ffc" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.1.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.2" date="1491307200">- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
- Update jstack tapset to handle AArch64
- Handle unsupported architectures by calling the error function rather than a parse failure
- ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
- Resolves: rhbz#1373986</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.3" date="1491393600">- Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1422738</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294400">- Bump to 2.6.10 and u141b00.
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Update md5sum list with checksum for the new java.security file.
- Drop 8173783 backport which is now applied upstream.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294401">- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.2" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="ee77e4291d5570d1ea6747a31e42093614fb31f7ce6a45945e7aee7857b683ff" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="318bba9b56ee0e112347780ddba553b118adb8d2df3b71f275f6730ccf67dda1" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="57635cb079aa08a9c2adbcde57bd3d4447a03690adc99a78d44ad99ab111ac7e" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="eed8f2ac71f0e4623729d16e278d53ca98a14f871ad426447268229c65437393" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="19adaa5772c72f740f8e9a6912c54134bf9eb850cac83f581823fa56b5e14f88" name="java-1.7.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.1.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.2" date="1491307200">- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
- Update jstack tapset to handle AArch64
- Handle unsupported architectures by calling the error function rather than a parse failure
- ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
- Resolves: rhbz#1373986</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.3" date="1491393600">- Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1422738</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294400">- Bump to 2.6.10 and u141b00.
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Update md5sum list with checksum for the new java.security file.
- Drop 8173783 backport which is now applied upstream.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294401">- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.2" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="ad84fd47a1aa35e505050e73ab1de59fb01b4639229efcf5891b12877cc52609" name="java-1.7.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.1.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.2" date="1491307200">- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
- Update jstack tapset to handle AArch64
- Handle unsupported architectures by calling the error function rather than a parse failure
- ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
- Resolves: rhbz#1373986</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.3" date="1491393600">- Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1422738</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294400">- Bump to 2.6.10 and u141b00.
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Update md5sum list with checksum for the new java.security file.
- Drop 8173783 backport which is now applied upstream.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294401">- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.2" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="796674d547fec371e1392f4b175a7457c63851ed07f3702cc656b2e8abe65f1f" name="java-1.7.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="40c0cba3802242d70cd7e0f9f431f8d9929f188e88ba5ffc8b0fc1b635e2c1d5" name="java-1.7.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="9834ddd75459e09d30675d502231f0d7b83f696949c05db508938bb5c8ccda92" name="java-1.7.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="20e14f9d35808f566fc6dc5d792d693e7705f07baa5d1209b6019f4a72e0b8e5" name="java-1.7.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="b69c605df7dd820e2bf07ff2edf0b08d3f17e183de91331328d08193e3813419" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="7ca83a11d52681e048b22456ea984f112c8b42a9983a6470dc89a1d1a21504c2" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="a14bea25edebed5bf9ede71cfe9b514ceef82fa867b927d7a6066b2ed425f700" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="1564ce1014c0c88b332a9f1edd014e76e3a8d12cee2e3487d5db2761a7e7dfc2" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="5870183ca5568fe6f24dff3207a6a8ece3d16da7f36fa75bf2e0f8844c6e3b9e" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="4c788bee369ccab5988fc55c16090d12e542a9cf147dad2e26337489c5aba61b" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="c853ee1b614a9bd2a5489447c32160f6b6ca64b206235e2d3d2f3e1df289737c" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="a9626b729584e12677fa833b797a7fd4e567c303624efd3da6074333c8b0ab52" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="bfaf72de3e7f51b01318317cad4b1e95dd35c066d3b6c79c88bf0d712c386524" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="7991667295d47c868cca32bb4f7c846b4b11a719f66e5ee0c5e98de1ef4882ac" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="9d76149f5968daa4a36422afe0ddc129e563f3d019c2ec5e12f17a4ec18f491e" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="6a53b82f3c1d635dca1c99adb1a0e30b5b0c4a54b5efd27546c3babb950243f5" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="04478da466a80632efc8f5a76458e39767e37694264c16d2a50f7500bf1b8a36" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="4c7e6777c41b9a89b08f91e5a7aa95c26cc026ae569a66b68eb7dd58490065ff" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="ba7c25ad29f1b22986a64daf459d403e0a189c963ed588fb0a45bca74a7d7869" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="080d2c8b4ac75295f65359b2216dfce90352053e94f3635229ca50fc448d3745" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="23549e8b5f75e9869cb744be083264c041d11fca36d1234d6ca39496192f5141" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="463c2dbb4f8a3c3c77eaa90222fd2b76372ef73a04913d9baf5da706dd02dbb4" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="7b2680d39931a62bdf11740fb909147dab462a0ae2950feb271140d82c5bca26" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="09047f84b7bef60914e8d1957e60c50995f37330da561a3126e23ffb56040f18" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="8f824ef69ddee64e8b28eaf9e53ea0658efb08c57fc29a833443ebef8024f820" name="java-1.8.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="4899c3c0e4111886ba21124ceb39f12ac961d83a0a3fed64b9632568bce486d9" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="7a52627d6af8794dbeb27efa211be22696dfcf6cfa0797c1a5234f09678e9f3f" name="java-1.8.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="364140247968803643bd07e5c3ec2a5549306cce7370409ece3566335c1cf5f6" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="d6b6e0fed947b1f28c62730f27fbdedaf63c0e267576fa4e9adf29e29fadc90e" name="java-1.8.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="0f19040b0d13791a5e5b93138373630958ef6fb32d8c7376a5390d5b849336fd" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="cb4b34d40d75a032332cda5ee2301195ce6d063eda4a61c582e455d939abaaf3" name="java-1.8.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="ebc4838b81a72db470b6168d90de1d9bd230dd38b567d6715ced3b877b84f977" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="edc5c866460e5e2ad35186a3c8cd83a470613f9bc2867c2acda5a4cc2f1ae277" name="java-1.8.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="5b5b342373ccb27bdafc572141ac5a0180444939e2f1aa7d54ed41c0f6bd5966" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="0da8adce72067c339cdb11a1f9023e47c667d9083adcf7c5d2753cf40573c66d" name="java-1.8.0-openjdk-accessibility-debug" arch="i686">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="16e469e632f947cdd03d8dadb944985068cc3b1e410c612ca26e76d062b94cc9" name="java-1.8.0-openjdk-accessibility-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="1756e3bad7e54b40316e9b545aaa8de45a67ff746df8893a052dd8488e3a5db4" name="java-1.8.0-openjdk-accessibility-debug" arch="i686">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="ed65c87b048c0f48c5e69ad9a21cd40ad58f44dc8d19fd5660ba009f456fd734" name="java-1.8.0-openjdk-accessibility-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="16b13a0fbc36a413fcf8b76886895ecb01233dfd18d35fb5cc5dbbe58ae357a5" name="java-1.8.0-openjdk-accessibility-debug" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="05e34c25171bd4d2e46f38e351c986a025b100343289ac9ae4112eaf5d3fc4c2" name="java-1.8.0-openjdk-accessibility-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="50781393fb1aae49e810962fa53767f061a95c4721ed1a03eaa6349346b64b71" name="java-1.8.0-openjdk-accessibility-debug" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="aa7815a78d883b7f49cb9b1a825e898397dec833be158e5e6e42da956269ee7d" name="java-1.8.0-openjdk-accessibility-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="a12c1629bb47f45ab395f45ffeb4c217eb295e8abee0a2e07dcaa430ac171dc1" name="java-1.8.0-openjdk-accessibility-debug" arch="i686">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="59d18b785f85584486cbae292f5a2f2aaa28e6c6cc2322fdc28123e0d29ae01b" name="java-1.8.0-openjdk-accessibility-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="fc907405c468f61ab820f42808dd21888e9e20c703525bb5608b439e61011fcd" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="84f42da5bf341b310dfcf0db57ff06127fdb6473f931fb2664fa82730dbbe53b" name="java-1.8.0-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="8ec6be5e8e15b52ee83ac9f81c766776a573ec75483b24a064d84a70fec798b5" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="397bf4aef39b4eb29330b6354631a722a871bf8f0dfd35a9787a395e3ce1a0f5" name="java-1.8.0-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="89a8e6c5d263bbe700aeb7969cb0229364330772589c1e9d56cff1dd45ce2589" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="548cdf6a8fd727f60db05b3da3b3b390e53e0b8bf9a7fd4638b35bc8e3c74ef8" name="java-1.8.0-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="ddcb3730da5a41c386227906abb085ddc98a8a120e713f0d518ea7c6144f466b" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="9b48a0cc1e112e2e9fe1add50e0a444e3072c0321383820cc4985bf407237998" name="java-1.8.0-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="dc800bc2e2e2c0fb280aeeed942f54acabed18babc1c2316a1dc5b2200d11e6a" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="1452761ac24e1e13dd7472ad86762cf0defda5b9e1c8df79792cc66854219264" name="java-1.8.0-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="3d79ac480863bbce76a58abb31a9592a964337dec300fd0aa574db5980878c77" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="3ea774d2d9bec961aa42103d97ea8265c331f93838a6d77429009a502b623447" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="bca958f6d27fd4fb2e0ce813d557db159dc87fe54ef3d8f4a68b1f7d05b54f7e" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="2aa92cff22dda724d769191e1c8abc953fb692fa86bf5db7ade117336ae727e0" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="c9bda06430661ac65a4889efa8bda174a377ac5a6070b38deba659fa7a21c0c0" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="0a6ab799f8734301574709f51409a9c2486b3da3bbc9d64b7a2bd94fa3a9b573" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="d58d5c5a883c0f36065c045ef33e8af7254744344f8f53c4351cdd5fd524db55" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="1e39b3d4d783e95eef6214c6fc3d63cd9af4aed6a01447db8bf9412f93504be8" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="c5d601950df1d6101eed67af00ed284cdaff97f7b3eb6207c9526fcbea85914f" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="6c88985258dbcc2b8f42d5b10527df650694597e376d322fd66c0cc7dfa35610" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="f58be1439e56c20e2cadbe2e9512cfeb900b270fb155f65e9a8a5b2e322c18b1" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="f597f57e7a800a4f0f50ff1f94d7f67c15dca2d7a77980ea6732272fd70e5d14" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="6a5a2717c5d8f10616b651b5ab3a9277956a565d299714773bf28bbb198995a5" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="7b85afa4e772c2cb2fd748aaada028a6a71ee34bb9afdab59cc931e657181620" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="e72ca06318c33cc315e46a0ac7a1e7938d76812cf0c6cc0b99f1141f2e2d3646" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="22ac3b2d1bb32f86e735901a16537d53a4f6db0d10c16c64c3b1edb3ba7a17b5" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="eb5b8dd55ec44d00e42ac0d9058bf83d79c583cbcb4035e9734331e7c387b7b8" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="97950ae42ab5418035ae7488c9799143281a7e22fa60ebcd90477e429f2fc362" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="0aa4b363bb0e1cd1e83bc6513ff45d0569f1b1a24ebed74865182215de505287" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="59b723d012c7b6c661a3ffe2db15a17cf6cf9f58368580858eaefa282e3ba179" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="d65938fb73e89a93947a039261078c5878a79ab3f3bc59135b100a7ee9eafebc" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="9e79a8b7e7721b7f444b3d887649049a1fe6f7b7c9bd9d085df13c0c34dbb749" name="java-1.8.0-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="fec4fd33e1d5af8205c055c7cfc9b42bb1908a030d120d003c685e60da76caae" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="c7c59e923150b6c96eb251d7e8e55ef4b886dba786d68c81be2019adb11e91f1" name="java-1.8.0-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="c4016656d56b36f38975e1c1cf0d3b834b2de82020fd2644e630ffdba65cc7d7" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="6de92be685448bb89894cdf37b39c1265aab723de093cea74f6e43e41e77ede0" name="java-1.8.0-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="50baa51d0cdcbb955445a9cfebd22022170e0681358ce97e9dbb85b2bb120889" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="fa2b238f8fd3305c7a4ab290e25d06acd3a1da031b12e765af04ce64cc7dbbb1" name="java-1.8.0-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="2bd38ab1eabc2ae2149caabeb1c2e418a52bb6fcd170194af28792a04639ab18" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="656ac444dd356177c9be25151a9776955f5c2c44d9a2f1d1438e07f529883971" name="java-1.8.0-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="8e96302039fb01b22e424c96fa7701b72b55d3b6e26b166d35ff32ece76cfd60" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="a3d2f9488bb9a72409675d97a43942446c35e40ba5f6f8b7df684965efa5500a" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="9fade14c1c1a2cc0df205bbc87dfa89076b6f894b30f77c10fd626da6e4307a9" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="9c56da1658158e1d3de97457c2cb52ba7d0acbba4450c238e3befac63d90f776" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="4074bf9c391993354303380db14ccb6f9afe63c5e336151a02de881eafa2a955" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="7651239fa4eff1363f98c6cb959a934bc664466743dddb5075ab987180a16427" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="2894d5be81c2cc4c4158290c56512d37790ddfd4d419dc2c1bbe2f4beba0625b" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="c942b465e4f238ae2458abb2cf5f68fc1ebd3dc82d1437ca3c1e24f4212f9c89" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="1df824b70cceaca11ad857936af75af0c35d8b5f7ef52205fc10a2772445e080" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="6fd1a06f162b317b8782040b459618a8341ab52ba068df05c6aa72594c2150d6" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="8dd62e128c7fd3ba016006610994497bfc428eb39940f2b32b89460409941ac6" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="9accb4bfbfbe97c732895965dead9d386dc31adb8f411e820d10f0b568a2131d" name="java-1.8.0-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="394a77fa311fc572321a03bb4de466c68690ae5122213958e16ed42482d0826c" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="7e70bbb347790d5f9bf7ac8ddec740a79bab98da2048f99c66cc9a8e6c4c62b8" name="java-1.8.0-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="13cce059ac5aba68e0809f7101ca06691345eeed88c7c9b6c0b5201ed47cf3b1" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="210b64daf20d8d6f118f2824b37cc9f168b35558a8b5d8d4c1382d74ed409ce4" name="java-1.8.0-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="d67bcc971adbad9a0fa7c8e824d10b1cce723c591ddd27b10e67165424b30034" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="50df4d5a0d2007b21b748d4f059e18a408d53d9fe513e63e03239cc8ed98cdab" name="java-1.8.0-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="85ec56d6387387a4194593cc79336e0f4731ec447b3f213f3d478e192f876079" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="7d408908681c7e686fb0b64b8a3e22cc8616c8a141a3bde3747dcbe7b401c88a" name="java-1.8.0-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="7718264a5087b932cab35e424eaa40f03c1ab0a68f9b2e98582ba2af96fa4df4" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="3a91dd4949a1c3d3019b2dd4fd448225c6f32353f07028043bf098b1b5642741" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="6db6adce3c2f4d889809991bad72f22b950ca90ddf210091c721fd8930dbe51f" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="6cbbe9439f3bfa49c703b5ec7a8cfa6cb724b795b6e0a30d4d8efff41238d9b3" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="747adf78646a0ff11cdadaf81b9ea3bd8e817be97a4149c28583d53d4631e074" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="aa578d56208edc3b8e374bc7e6fe8c172cd62455debd9317ef6f50fa72dfddbc" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="632e4c006e961f9f140428bee88b436cf0c6b9137ccb1aa58ca69e5467393eb0" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="d2352364d2d2fdad38a313d01d8ef085429d89770a0af04e5954e4ad9b0b08bd" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="98243be5e756dbfebd4ca5522ad595342d37a8827f829847311ddc98c4040a03" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="b5705ffcb53a57b2ca0aab8d750edb398a012638571a8c20547e618dc1321987" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="f4b9b5a97aab82b9ad5ba46238c8028b64e0fb9884fa8b3febd670f0aeb42547" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="f98ce8d9aeaf2fb0c084d9c38e5e4072973ee55c18436aa0e1fbffb81d12c8a0" name="java-1.8.0-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="e8d22f4648821b8d2463f6c7ffe33e5e6db590365e358da25eecac0fe8dd8e52" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="1c05cf229b67c885fc5f82cfde38685585abd185206cc627c3aa2ed0c1aa6463" name="java-1.8.0-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="95241ab09fa22fa6e4c67b1fbdc93a22b893577c0611be237b3b5af4cbf98e11" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="e214ce7e3584b04d775f50a295c1d21e054482cc419500cd619ec03000b0caf9" name="java-1.8.0-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="266b05dab8c166ecb4f478b3995f8d8780f7bf04a368e214021a7d0aea7478b6" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="346850e8dcbbf28861fecaee40f96f07e7f9164a484feb4812fc8f5491eb3d5c" name="java-1.8.0-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="46dca37aef9d103b3c206411a58945cf51870e4b2fee2085440c7acaac06bd7d" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="e4c5db3100bb8a9a980e1eb0ec151d903f44a716ebf75104e96483a484d02955" name="java-1.8.0-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="2b67205246c4028831b3cc1c3cedc7ac3b59c3827283ce96ff6ae269e828573c" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="f422763f579adc5d5b8c3f233acd279708d390f75a656532fe9a86feb9c9181c" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="818e5d84910a29048ea99e5417892c7f7e20873b03ad941b66a818541247c93d" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="5978cc77edb9a18bdd1621c6256d09dd496958976a207aad4d78ea1719feeae4" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="cfb6ad7ac56cc0e5ac9f2f7304872acf4345da77bdcb91d03a653ebb488a22ff" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="d864419503a9cc3c1e60f40c2bdc599342ae749b876ab01cf2edad868f867849" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="912b670a9250eb5b16668a85741da07e6dfcee2c714ccedf1abda43469912272" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="906ff2a53d72f00030ab65b7518c6754069b169ece9b2c0dfc1f9d7999861e23" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="0d895dc4ae8f4477bf41d4f38bb9ca1aed5c646b0d4916ef5946d4e8da4da42f" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="3beaf70e355ce75e306394fc26c8490094c38388f6daef4f207237e9c77f5b37" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="77a9c34215b63fe28e4efecd05132cd54f6bcb25d34f5024059f7eed3d667665" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="75f4be53ff97c224686d26fd4979b3def3e67984994565812c8da2b39e74c1e8" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="2e63963b67100bab187f31bbd77650cb0b85b50d4bd9146519259cd4e572b314" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="ecf9f935e129e3f3e57dd6e24f24eab686c5df05c3a07a0ef1e090afe50e63a3" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="e24d0318431002749f2f96b9ff285a20d244dc0ed2312f2a0a0f09db707441fd" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="26165576a19ab67abc3901e6278072a0c61fe8c9d76617eae49ceaa7e48c9a71" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="f17db63e6fe4246630e031b8be9894a974dc1b15dae044666d34a87feab6913c" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="889b47813872ac8456a772edd65ebda35e87fc32fa8d85f68ef0022c097b46ad" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="44f097ddbe347805ab7677afc932aae39b92bb7df0e30efb25a9a434a92a75ce" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="3301203e37deb8ef41d539a0593d035f5222944fcf27560b71f0c1ac6c272b82" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="e622f558fa4b0bb653bd0161123a9f73da2e4b9b8bd1df14afd398bba18c2504" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="0b6f0ab013fdd3e2dfc6dc302f196a8a3a063dafb65080a13a5886a3dadae229" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="1c2833ac156d8d0a3351a7f5b174ef1239cb719769443b9aaec6d56d7844053c" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="a2abff1308da261af02eebb61898a203d0868203122ebc247c7b37b48119ceeb" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="ff0b31af49e9818cd908add6c686ae801e2a0bcebc74be7d537ae5f15dd2f932" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="cc99cbb1ad1d8b9ea4566e0a02bf094d440b33a00cd65fc23a4ff95b6943cdcd" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="fd96b20e94c3f6cc15d24aa84bbe69fce5bf8fdaf8051772b7b2aa951380e0c0" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="72ed6d67d621c5c165ee7b2f2dd6ee8c991f36670d428d9249fcf66100850727" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="700e33caf64c44dac7a7a30cb6959f65f6a050675a61172d2c00df4e230e8963" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="5e8462a92e3f0587257cb04ae037ef74a6f20b3ea4c601149a1d1c72491323d5" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="7821969d112004274c5c0ab10c1c4d0a236435eadbd9364f33eb1a8327e2ae01" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="a6ff0f476b33eef58390dd313258929b1be00ed8b97778c73a951ee0d21182c0" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="a40582069e1c85dda4b2a6e46a8dc3ce6d297dff07e00ab79c4c4e2dc743e3b4" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="3688efa1ca22eb017ef37b983f7f9057bdd2b5e130423c66f0b47e931757f369" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="4c5c3b1f85ded20954b11b4e0b08fddf2183684e9b9ee64fe7e563097c437845" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="0efd15c5882cda1bbd9ea748bfa1faa84ca596dd31a3b64c25746b03c5c2282f" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="e193031f6d684b6942f9510d2a29e1879ca38d8c2e68808b1755a2677c8e9f9d" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="631087d848d5cc8fa4de0a9b2ed7cb7d8aaa6140995ab1a82910626585da44af" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="0f57bc3acaca3abaa9d14990573bb22ccc3db7b81874eafac32b1eeb1cfa35e0" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="033fb77f9711620214d016b74cd5bb5992c4be80140312173a72309802186e51" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="f5df92149688c348f14f53a41d79746b21073012569c4e294230bc31d86386fd" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="e1f4ea5d499d6502619451ecd74c1e0c73cd7d16653b04c4317e97291861970a" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="25aac1d0dc27526aeb364f760d1a71161d90cef87adcbd9e82fae7b0d1f0d641" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="ca9d958432bb059aa49f21f665bca32f6a76cb8e251e22a2b1534bef15ac897c" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="205263b45f09644bb97778ee9fe43928713a2087eefd9c4c03f72f5f688ad3a5" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="75df1dccdd8443467cc9d2b9fa76068c33e986bf9beef8167f38fc3d8747215a" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="49db0322171cf47ca5e958832583196de1d17c32400fd4ac286f59be114148e5" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="25bec0aa3eaac6d6951b01840898617776fb34e422d4737da4a17bafe713c5d1" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="0e737042d9c84ef4fed864852e00af3677ec308330df80bef6079357789408cf" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="b7970bb1a9f6864c7618fd1232f1e40f38a7fc72dbc16ea425897b69c79c6054" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="8c3811821894b798f1c6d297103e9bc949bfc4e6803fbeaa3af5626802870055" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="d9ac0253139bc762bcb6a6adbb55dd6b9bf1e559d3319560953221f24859bf16" name="java-1.8.0-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-7.b12" date="1493640000">- Fix misspelt accessibility Provides
- Resolves: rhbz#1438514</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="eacdd4831aa69c7616f5e32d596da366dfef01a1a2d0f6c4ad3877fa33e65994" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="064517d762029417b790652375a1f26546798de82b9b123d0e72cf81ec08955e" name="java-1.8.0-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="025f125d94d5c2e7b2627fb7958290430436e28d3f2ede3b5ed663d97c71e968" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="4c3d73906ce2a6394b2406c2d128dc12ef310e283bdc32f94e4eac5a74c677fa" name="java-1.8.0-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="f206e51190646b463d271d1426b0f0eaf5d4fdfbd582130cfec16ee83ff20634" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="586b6331b58948deb4941e2749d2e9bd293aedd8977e4693e7e598fff8241ef7" name="java-1.8.0-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="1adc07b28d824dc61363024bb4268413575e159efed2768cf89bce671f5f0339" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="27081b7d41caf488335a45d86aa17fc8cfd1340cdca1c1969fcdcde68c7fe004" name="java-1.8.0-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="5e2a5de24ea6ab97270b9101eca4bd11f6f5091bac9227e5561fc6668ce463bf" name="jss" arch="i686">
  <version epoch="0" ver="4.4.0" rel="9.el7_4"/>
  <changelog author="Jack Magne &lt;jmagne@redhat.com&gt; - 4.2.6-44" date="1487764800">- Bugzilla Bug #1425971 - Simple problem unwrapping AES sym keys on token</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.4.0-1" date="1489406400">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- ## JSS 4.4.0 includes the following patches ported from downstream:
- Mozilla Bugzilla #507536 - Add IPv6 functionality to JSS
- Mozilla Bugzilla #1307872 - Expose NSS calls for OCSP settings
- Mozilla Bugzilla #1307882 - RFE ecc - add ecc curve name support in JSS and
  CS interface
- Mozilla Bugzilla #1307993 - Expose updated certificate verification function
  in JSS
- Mozilla Bugzilla #1308000 - Incorrect socket accept error message due to bad
  pointer arithmetic
- Mozilla Bugzilla #1308001 - Verification should fail when a revoked
  certificate is added
- Mozilla Bugzilla #1308004 - Warnings should be cleaned up in JSS build
- Mozilla Bugzilla #1308006 - DRM failed to recovery keys when in FIPS mode
  (HSM + NSS)
- Mozilla Bugzilla #1308008 - Defects revealed by Coverity scan
- Mozilla Bugzilla #1308009 - Add support for PKCS5v2; support for secure PKCS12
- Mozilla Bugzilla #1308012 - DRM: during archiving and recovering, wrapping
  unwrapping keys should be done in the token
- Mozilla Bugzilla #1308013 - JSS - HSM token name was mistaken for
  manufacturer identifier
- Mozilla Bugzilla #1308017 - Un-deprecate previously deprecated methods in
  JSS 4.2.6
- Mozilla Bugzilla #1308019 - Provide Tomcat support for TLS v1.1 and
  TLS v1.2 via NSS through JSS
- Mozilla Bugzilla #1308026 - JSS certificate validation does not pass up exact
  error from NSS
- Mozilla Bugzilla #1308027 - Merge pki-symkey into jss
- Mozilla Bugzilla #1308029 - Resolve Javadoc build issues
- Mozilla Bugzilla #1308047 - support ECC encryption key archival and recovery
- Mozilla Bugzilla #1313122 - Remove bypass tests as latest NSS has removed
  PKCS#11 bypass support
- Mozilla Bugzilla #1328675 - Simple problem unwrapping AES sym keys on token
- Mozilla Bugzilla #1345174 - Cannot create system certs when using LunaSA HSM
  in FIPS Mode and ECC algorithms
- Mozilla Bugzilla #1345613 - expose AES KeyWrap and add some useful OID
  functions
- Mozilla Bugzilla #1346410 - Load JSS libraries appropriately
- ## JSS 4.4.0 includes the following changes for building and testing:
- Mozilla Bugzilla #1331765 - Simplify JSS Makefile build and test
- Mozilla Bugzilla #1346420 - Document steps required to use the proper
  libjss4.so when running certain HMAC Algorithms tests</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-2" date="1489579200">- Added Conflicts statement due to incompatibility with tomcatjss &lt; 7.2.1</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-3" date="1490097600">- Added Conflicts statement due to incompatibility with pki-base &lt; 10.4.0</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
</package>
<package pkgid="77bdcdb0c93a98ebb4779e87be4a513ff17ae640b43ad02edc3dfb23e1c6afec" name="jss" arch="src">
  <version epoch="0" ver="4.4.0" rel="9.el7_4"/>
  <changelog author="Jack Magne &lt;jmagne@redhat.com&gt; - 4.2.6-44" date="1487764800">- Bugzilla Bug #1425971 - Simple problem unwrapping AES sym keys on token</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.4.0-1" date="1489406400">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- ## JSS 4.4.0 includes the following patches ported from downstream:
- Mozilla Bugzilla #507536 - Add IPv6 functionality to JSS
- Mozilla Bugzilla #1307872 - Expose NSS calls for OCSP settings
- Mozilla Bugzilla #1307882 - RFE ecc - add ecc curve name support in JSS and
  CS interface
- Mozilla Bugzilla #1307993 - Expose updated certificate verification function
  in JSS
- Mozilla Bugzilla #1308000 - Incorrect socket accept error message due to bad
  pointer arithmetic
- Mozilla Bugzilla #1308001 - Verification should fail when a revoked
  certificate is added
- Mozilla Bugzilla #1308004 - Warnings should be cleaned up in JSS build
- Mozilla Bugzilla #1308006 - DRM failed to recovery keys when in FIPS mode
  (HSM + NSS)
- Mozilla Bugzilla #1308008 - Defects revealed by Coverity scan
- Mozilla Bugzilla #1308009 - Add support for PKCS5v2; support for secure PKCS12
- Mozilla Bugzilla #1308012 - DRM: during archiving and recovering, wrapping
  unwrapping keys should be done in the token
- Mozilla Bugzilla #1308013 - JSS - HSM token name was mistaken for
  manufacturer identifier
- Mozilla Bugzilla #1308017 - Un-deprecate previously deprecated methods in
  JSS 4.2.6
- Mozilla Bugzilla #1308019 - Provide Tomcat support for TLS v1.1 and
  TLS v1.2 via NSS through JSS
- Mozilla Bugzilla #1308026 - JSS certificate validation does not pass up exact
  error from NSS
- Mozilla Bugzilla #1308027 - Merge pki-symkey into jss
- Mozilla Bugzilla #1308029 - Resolve Javadoc build issues
- Mozilla Bugzilla #1308047 - support ECC encryption key archival and recovery
- Mozilla Bugzilla #1313122 - Remove bypass tests as latest NSS has removed
  PKCS#11 bypass support
- Mozilla Bugzilla #1328675 - Simple problem unwrapping AES sym keys on token
- Mozilla Bugzilla #1345174 - Cannot create system certs when using LunaSA HSM
  in FIPS Mode and ECC algorithms
- Mozilla Bugzilla #1345613 - expose AES KeyWrap and add some useful OID
  functions
- Mozilla Bugzilla #1346410 - Load JSS libraries appropriately
- ## JSS 4.4.0 includes the following changes for building and testing:
- Mozilla Bugzilla #1331765 - Simplify JSS Makefile build and test
- Mozilla Bugzilla #1346420 - Document steps required to use the proper
  libjss4.so when running certain HMAC Algorithms tests</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-2" date="1489579200">- Added Conflicts statement due to incompatibility with tomcatjss &lt; 7.2.1</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-3" date="1490097600">- Added Conflicts statement due to incompatibility with pki-base &lt; 10.4.0</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
</package>
<package pkgid="49ea3e933cdda0d26389b0a4c78a0e22d9459244eb3cb3339fa8c67463dc071c" name="jss" arch="src">
  <version epoch="0" ver="4.4.0" rel="9.el7_4"/>
  <changelog author="Jack Magne &lt;jmagne@redhat.com&gt; - 4.2.6-44" date="1487764800">- Bugzilla Bug #1425971 - Simple problem unwrapping AES sym keys on token</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.4.0-1" date="1489406400">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- ## JSS 4.4.0 includes the following patches ported from downstream:
- Mozilla Bugzilla #507536 - Add IPv6 functionality to JSS
- Mozilla Bugzilla #1307872 - Expose NSS calls for OCSP settings
- Mozilla Bugzilla #1307882 - RFE ecc - add ecc curve name support in JSS and
  CS interface
- Mozilla Bugzilla #1307993 - Expose updated certificate verification function
  in JSS
- Mozilla Bugzilla #1308000 - Incorrect socket accept error message due to bad
  pointer arithmetic
- Mozilla Bugzilla #1308001 - Verification should fail when a revoked
  certificate is added
- Mozilla Bugzilla #1308004 - Warnings should be cleaned up in JSS build
- Mozilla Bugzilla #1308006 - DRM failed to recovery keys when in FIPS mode
  (HSM + NSS)
- Mozilla Bugzilla #1308008 - Defects revealed by Coverity scan
- Mozilla Bugzilla #1308009 - Add support for PKCS5v2; support for secure PKCS12
- Mozilla Bugzilla #1308012 - DRM: during archiving and recovering, wrapping
  unwrapping keys should be done in the token
- Mozilla Bugzilla #1308013 - JSS - HSM token name was mistaken for
  manufacturer identifier
- Mozilla Bugzilla #1308017 - Un-deprecate previously deprecated methods in
  JSS 4.2.6
- Mozilla Bugzilla #1308019 - Provide Tomcat support for TLS v1.1 and
  TLS v1.2 via NSS through JSS
- Mozilla Bugzilla #1308026 - JSS certificate validation does not pass up exact
  error from NSS
- Mozilla Bugzilla #1308027 - Merge pki-symkey into jss
- Mozilla Bugzilla #1308029 - Resolve Javadoc build issues
- Mozilla Bugzilla #1308047 - support ECC encryption key archival and recovery
- Mozilla Bugzilla #1313122 - Remove bypass tests as latest NSS has removed
  PKCS#11 bypass support
- Mozilla Bugzilla #1328675 - Simple problem unwrapping AES sym keys on token
- Mozilla Bugzilla #1345174 - Cannot create system certs when using LunaSA HSM
  in FIPS Mode and ECC algorithms
- Mozilla Bugzilla #1345613 - expose AES KeyWrap and add some useful OID
  functions
- Mozilla Bugzilla #1346410 - Load JSS libraries appropriately
- ## JSS 4.4.0 includes the following changes for building and testing:
- Mozilla Bugzilla #1331765 - Simplify JSS Makefile build and test
- Mozilla Bugzilla #1346420 - Document steps required to use the proper
  libjss4.so when running certain HMAC Algorithms tests</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-2" date="1489579200">- Added Conflicts statement due to incompatibility with tomcatjss &lt; 7.2.1</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-3" date="1490097600">- Added Conflicts statement due to incompatibility with pki-base &lt; 10.4.0</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
</package>
<package pkgid="2ab498a747760b47ad4ba9d070976e03c94769f7da6dfa0058962d258ce2e326" name="jss" arch="x86_64">
  <version epoch="0" ver="4.4.0" rel="9.el7_4"/>
  <changelog author="Jack Magne &lt;jmagne@redhat.com&gt; - 4.2.6-44" date="1487764800">- Bugzilla Bug #1425971 - Simple problem unwrapping AES sym keys on token</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.4.0-1" date="1489406400">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- ## JSS 4.4.0 includes the following patches ported from downstream:
- Mozilla Bugzilla #507536 - Add IPv6 functionality to JSS
- Mozilla Bugzilla #1307872 - Expose NSS calls for OCSP settings
- Mozilla Bugzilla #1307882 - RFE ecc - add ecc curve name support in JSS and
  CS interface
- Mozilla Bugzilla #1307993 - Expose updated certificate verification function
  in JSS
- Mozilla Bugzilla #1308000 - Incorrect socket accept error message due to bad
  pointer arithmetic
- Mozilla Bugzilla #1308001 - Verification should fail when a revoked
  certificate is added
- Mozilla Bugzilla #1308004 - Warnings should be cleaned up in JSS build
- Mozilla Bugzilla #1308006 - DRM failed to recovery keys when in FIPS mode
  (HSM + NSS)
- Mozilla Bugzilla #1308008 - Defects revealed by Coverity scan
- Mozilla Bugzilla #1308009 - Add support for PKCS5v2; support for secure PKCS12
- Mozilla Bugzilla #1308012 - DRM: during archiving and recovering, wrapping
  unwrapping keys should be done in the token
- Mozilla Bugzilla #1308013 - JSS - HSM token name was mistaken for
  manufacturer identifier
- Mozilla Bugzilla #1308017 - Un-deprecate previously deprecated methods in
  JSS 4.2.6
- Mozilla Bugzilla #1308019 - Provide Tomcat support for TLS v1.1 and
  TLS v1.2 via NSS through JSS
- Mozilla Bugzilla #1308026 - JSS certificate validation does not pass up exact
  error from NSS
- Mozilla Bugzilla #1308027 - Merge pki-symkey into jss
- Mozilla Bugzilla #1308029 - Resolve Javadoc build issues
- Mozilla Bugzilla #1308047 - support ECC encryption key archival and recovery
- Mozilla Bugzilla #1313122 - Remove bypass tests as latest NSS has removed
  PKCS#11 bypass support
- Mozilla Bugzilla #1328675 - Simple problem unwrapping AES sym keys on token
- Mozilla Bugzilla #1345174 - Cannot create system certs when using LunaSA HSM
  in FIPS Mode and ECC algorithms
- Mozilla Bugzilla #1345613 - expose AES KeyWrap and add some useful OID
  functions
- Mozilla Bugzilla #1346410 - Load JSS libraries appropriately
- ## JSS 4.4.0 includes the following changes for building and testing:
- Mozilla Bugzilla #1331765 - Simplify JSS Makefile build and test
- Mozilla Bugzilla #1346420 - Document steps required to use the proper
  libjss4.so when running certain HMAC Algorithms tests</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-2" date="1489579200">- Added Conflicts statement due to incompatibility with tomcatjss &lt; 7.2.1</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-3" date="1490097600">- Added Conflicts statement due to incompatibility with pki-base &lt; 10.4.0</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
</package>
<package pkgid="900ac61d7b46d1250e1654e90a49e220db6cd615b9d54afc690a36c93773a1af" name="jss-debuginfo" arch="i686">
  <version epoch="0" ver="4.4.0" rel="9.el7_4"/>
  <changelog author="Jack Magne &lt;jmagne@redhat.com&gt; - 4.2.6-44" date="1487764800">- Bugzilla Bug #1425971 - Simple problem unwrapping AES sym keys on token</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.4.0-1" date="1489406400">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- ## JSS 4.4.0 includes the following patches ported from downstream:
- Mozilla Bugzilla #507536 - Add IPv6 functionality to JSS
- Mozilla Bugzilla #1307872 - Expose NSS calls for OCSP settings
- Mozilla Bugzilla #1307882 - RFE ecc - add ecc curve name support in JSS and
  CS interface
- Mozilla Bugzilla #1307993 - Expose updated certificate verification function
  in JSS
- Mozilla Bugzilla #1308000 - Incorrect socket accept error message due to bad
  pointer arithmetic
- Mozilla Bugzilla #1308001 - Verification should fail when a revoked
  certificate is added
- Mozilla Bugzilla #1308004 - Warnings should be cleaned up in JSS build
- Mozilla Bugzilla #1308006 - DRM failed to recovery keys when in FIPS mode
  (HSM + NSS)
- Mozilla Bugzilla #1308008 - Defects revealed by Coverity scan
- Mozilla Bugzilla #1308009 - Add support for PKCS5v2; support for secure PKCS12
- Mozilla Bugzilla #1308012 - DRM: during archiving and recovering, wrapping
  unwrapping keys should be done in the token
- Mozilla Bugzilla #1308013 - JSS - HSM token name was mistaken for
  manufacturer identifier
- Mozilla Bugzilla #1308017 - Un-deprecate previously deprecated methods in
  JSS 4.2.6
- Mozilla Bugzilla #1308019 - Provide Tomcat support for TLS v1.1 and
  TLS v1.2 via NSS through JSS
- Mozilla Bugzilla #1308026 - JSS certificate validation does not pass up exact
  error from NSS
- Mozilla Bugzilla #1308027 - Merge pki-symkey into jss
- Mozilla Bugzilla #1308029 - Resolve Javadoc build issues
- Mozilla Bugzilla #1308047 - support ECC encryption key archival and recovery
- Mozilla Bugzilla #1313122 - Remove bypass tests as latest NSS has removed
  PKCS#11 bypass support
- Mozilla Bugzilla #1328675 - Simple problem unwrapping AES sym keys on token
- Mozilla Bugzilla #1345174 - Cannot create system certs when using LunaSA HSM
  in FIPS Mode and ECC algorithms
- Mozilla Bugzilla #1345613 - expose AES KeyWrap and add some useful OID
  functions
- Mozilla Bugzilla #1346410 - Load JSS libraries appropriately
- ## JSS 4.4.0 includes the following changes for building and testing:
- Mozilla Bugzilla #1331765 - Simplify JSS Makefile build and test
- Mozilla Bugzilla #1346420 - Document steps required to use the proper
  libjss4.so when running certain HMAC Algorithms tests</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-2" date="1489579200">- Added Conflicts statement due to incompatibility with tomcatjss &lt; 7.2.1</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-3" date="1490097600">- Added Conflicts statement due to incompatibility with pki-base &lt; 10.4.0</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
</package>
<package pkgid="b49c356f562616bd322333561cfa2eb39f2768066830d119c477e6a0ce05ffc5" name="jss-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.4.0" rel="9.el7_4"/>
  <changelog author="Jack Magne &lt;jmagne@redhat.com&gt; - 4.2.6-44" date="1487764800">- Bugzilla Bug #1425971 - Simple problem unwrapping AES sym keys on token</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.4.0-1" date="1489406400">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- ## JSS 4.4.0 includes the following patches ported from downstream:
- Mozilla Bugzilla #507536 - Add IPv6 functionality to JSS
- Mozilla Bugzilla #1307872 - Expose NSS calls for OCSP settings
- Mozilla Bugzilla #1307882 - RFE ecc - add ecc curve name support in JSS and
  CS interface
- Mozilla Bugzilla #1307993 - Expose updated certificate verification function
  in JSS
- Mozilla Bugzilla #1308000 - Incorrect socket accept error message due to bad
  pointer arithmetic
- Mozilla Bugzilla #1308001 - Verification should fail when a revoked
  certificate is added
- Mozilla Bugzilla #1308004 - Warnings should be cleaned up in JSS build
- Mozilla Bugzilla #1308006 - DRM failed to recovery keys when in FIPS mode
  (HSM + NSS)
- Mozilla Bugzilla #1308008 - Defects revealed by Coverity scan
- Mozilla Bugzilla #1308009 - Add support for PKCS5v2; support for secure PKCS12
- Mozilla Bugzilla #1308012 - DRM: during archiving and recovering, wrapping
  unwrapping keys should be done in the token
- Mozilla Bugzilla #1308013 - JSS - HSM token name was mistaken for
  manufacturer identifier
- Mozilla Bugzilla #1308017 - Un-deprecate previously deprecated methods in
  JSS 4.2.6
- Mozilla Bugzilla #1308019 - Provide Tomcat support for TLS v1.1 and
  TLS v1.2 via NSS through JSS
- Mozilla Bugzilla #1308026 - JSS certificate validation does not pass up exact
  error from NSS
- Mozilla Bugzilla #1308027 - Merge pki-symkey into jss
- Mozilla Bugzilla #1308029 - Resolve Javadoc build issues
- Mozilla Bugzilla #1308047 - support ECC encryption key archival and recovery
- Mozilla Bugzilla #1313122 - Remove bypass tests as latest NSS has removed
  PKCS#11 bypass support
- Mozilla Bugzilla #1328675 - Simple problem unwrapping AES sym keys on token
- Mozilla Bugzilla #1345174 - Cannot create system certs when using LunaSA HSM
  in FIPS Mode and ECC algorithms
- Mozilla Bugzilla #1345613 - expose AES KeyWrap and add some useful OID
  functions
- Mozilla Bugzilla #1346410 - Load JSS libraries appropriately
- ## JSS 4.4.0 includes the following changes for building and testing:
- Mozilla Bugzilla #1331765 - Simplify JSS Makefile build and test
- Mozilla Bugzilla #1346420 - Document steps required to use the proper
  libjss4.so when running certain HMAC Algorithms tests</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-2" date="1489579200">- Added Conflicts statement due to incompatibility with tomcatjss &lt; 7.2.1</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-3" date="1490097600">- Added Conflicts statement due to incompatibility with pki-base &lt; 10.4.0</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
</package>
<package pkgid="ce1bb44aaff32de7203af6d946adabd910393e8b60704093d038c772dd472a4a" name="jss-javadoc" arch="i686">
  <version epoch="0" ver="4.4.0" rel="9.el7_4"/>
  <changelog author="Jack Magne &lt;jmagne@redhat.com&gt; - 4.2.6-44" date="1487764800">- Bugzilla Bug #1425971 - Simple problem unwrapping AES sym keys on token</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.4.0-1" date="1489406400">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- ## JSS 4.4.0 includes the following patches ported from downstream:
- Mozilla Bugzilla #507536 - Add IPv6 functionality to JSS
- Mozilla Bugzilla #1307872 - Expose NSS calls for OCSP settings
- Mozilla Bugzilla #1307882 - RFE ecc - add ecc curve name support in JSS and
  CS interface
- Mozilla Bugzilla #1307993 - Expose updated certificate verification function
  in JSS
- Mozilla Bugzilla #1308000 - Incorrect socket accept error message due to bad
  pointer arithmetic
- Mozilla Bugzilla #1308001 - Verification should fail when a revoked
  certificate is added
- Mozilla Bugzilla #1308004 - Warnings should be cleaned up in JSS build
- Mozilla Bugzilla #1308006 - DRM failed to recovery keys when in FIPS mode
  (HSM + NSS)
- Mozilla Bugzilla #1308008 - Defects revealed by Coverity scan
- Mozilla Bugzilla #1308009 - Add support for PKCS5v2; support for secure PKCS12
- Mozilla Bugzilla #1308012 - DRM: during archiving and recovering, wrapping
  unwrapping keys should be done in the token
- Mozilla Bugzilla #1308013 - JSS - HSM token name was mistaken for
  manufacturer identifier
- Mozilla Bugzilla #1308017 - Un-deprecate previously deprecated methods in
  JSS 4.2.6
- Mozilla Bugzilla #1308019 - Provide Tomcat support for TLS v1.1 and
  TLS v1.2 via NSS through JSS
- Mozilla Bugzilla #1308026 - JSS certificate validation does not pass up exact
  error from NSS
- Mozilla Bugzilla #1308027 - Merge pki-symkey into jss
- Mozilla Bugzilla #1308029 - Resolve Javadoc build issues
- Mozilla Bugzilla #1308047 - support ECC encryption key archival and recovery
- Mozilla Bugzilla #1313122 - Remove bypass tests as latest NSS has removed
  PKCS#11 bypass support
- Mozilla Bugzilla #1328675 - Simple problem unwrapping AES sym keys on token
- Mozilla Bugzilla #1345174 - Cannot create system certs when using LunaSA HSM
  in FIPS Mode and ECC algorithms
- Mozilla Bugzilla #1345613 - expose AES KeyWrap and add some useful OID
  functions
- Mozilla Bugzilla #1346410 - Load JSS libraries appropriately
- ## JSS 4.4.0 includes the following changes for building and testing:
- Mozilla Bugzilla #1331765 - Simplify JSS Makefile build and test
- Mozilla Bugzilla #1346420 - Document steps required to use the proper
  libjss4.so when running certain HMAC Algorithms tests</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-2" date="1489579200">- Added Conflicts statement due to incompatibility with tomcatjss &lt; 7.2.1</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-3" date="1490097600">- Added Conflicts statement due to incompatibility with pki-base &lt; 10.4.0</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
</package>
<package pkgid="e2755848cd439ed87df0262c78678fe8bb5ca702778505ad3aa9b1473a2831d8" name="jss-javadoc" arch="x86_64">
  <version epoch="0" ver="4.4.0" rel="9.el7_4"/>
  <changelog author="Jack Magne &lt;jmagne@redhat.com&gt; - 4.2.6-44" date="1487764800">- Bugzilla Bug #1425971 - Simple problem unwrapping AES sym keys on token</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.4.0-1" date="1489406400">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- ## JSS 4.4.0 includes the following patches ported from downstream:
- Mozilla Bugzilla #507536 - Add IPv6 functionality to JSS
- Mozilla Bugzilla #1307872 - Expose NSS calls for OCSP settings
- Mozilla Bugzilla #1307882 - RFE ecc - add ecc curve name support in JSS and
  CS interface
- Mozilla Bugzilla #1307993 - Expose updated certificate verification function
  in JSS
- Mozilla Bugzilla #1308000 - Incorrect socket accept error message due to bad
  pointer arithmetic
- Mozilla Bugzilla #1308001 - Verification should fail when a revoked
  certificate is added
- Mozilla Bugzilla #1308004 - Warnings should be cleaned up in JSS build
- Mozilla Bugzilla #1308006 - DRM failed to recovery keys when in FIPS mode
  (HSM + NSS)
- Mozilla Bugzilla #1308008 - Defects revealed by Coverity scan
- Mozilla Bugzilla #1308009 - Add support for PKCS5v2; support for secure PKCS12
- Mozilla Bugzilla #1308012 - DRM: during archiving and recovering, wrapping
  unwrapping keys should be done in the token
- Mozilla Bugzilla #1308013 - JSS - HSM token name was mistaken for
  manufacturer identifier
- Mozilla Bugzilla #1308017 - Un-deprecate previously deprecated methods in
  JSS 4.2.6
- Mozilla Bugzilla #1308019 - Provide Tomcat support for TLS v1.1 and
  TLS v1.2 via NSS through JSS
- Mozilla Bugzilla #1308026 - JSS certificate validation does not pass up exact
  error from NSS
- Mozilla Bugzilla #1308027 - Merge pki-symkey into jss
- Mozilla Bugzilla #1308029 - Resolve Javadoc build issues
- Mozilla Bugzilla #1308047 - support ECC encryption key archival and recovery
- Mozilla Bugzilla #1313122 - Remove bypass tests as latest NSS has removed
  PKCS#11 bypass support
- Mozilla Bugzilla #1328675 - Simple problem unwrapping AES sym keys on token
- Mozilla Bugzilla #1345174 - Cannot create system certs when using LunaSA HSM
  in FIPS Mode and ECC algorithms
- Mozilla Bugzilla #1345613 - expose AES KeyWrap and add some useful OID
  functions
- Mozilla Bugzilla #1346410 - Load JSS libraries appropriately
- ## JSS 4.4.0 includes the following changes for building and testing:
- Mozilla Bugzilla #1331765 - Simplify JSS Makefile build and test
- Mozilla Bugzilla #1346420 - Document steps required to use the proper
  libjss4.so when running certain HMAC Algorithms tests</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-2" date="1489579200">- Added Conflicts statement due to incompatibility with tomcatjss &lt; 7.2.1</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-3" date="1490097600">- Added Conflicts statement due to incompatibility with pki-base &lt; 10.4.0</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
</package>
<package pkgid="8e31ae2546e5a3839042e5326aab9c589a462d5573ca0f03d55baa232861bc6b" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.1.1.el7" date="1502798400">- Apply debranding changes</changelog>
</package>
<package pkgid="eec61192287a3627eed73e38dd64e845219b8961743efc5e4a5118810f2e4d9c" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.1.1.el7" date="1502798400">- Apply debranding changes</changelog>
</package>
<package pkgid="00a34b139d0a8bdd46e4bcc80013b1106a153c93fa677db5fa294dc1396e4344" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7.centos.plus"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.11.1.el7.centos.plus]" date="1512043200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="34fd6eff650acc266ab38235b5220a966fa3658d4806140893db00ae707e56a4" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7.centos.plus"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.11.1.el7.centos.plus]" date="1512043200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="62179f9544ac9d10b28ec68326b5c76dd88ef9bbb7b1ed31ed259618b00fa48e" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7.centos.plus"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.11.1.el7.centos.plus]" date="1512043200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="1fd096fd26efb1641881ce0682158a9c669234f2cf15d3f1f4d17636c0eec66a" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.1.el7" date="1512043200">- Apply debranding changes</changelog>
</package>
<package pkgid="1fd096fd26efb1641881ce0682158a9c669234f2cf15d3f1f4d17636c0eec66a" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.1.el7" date="1512043200">- Apply debranding changes</changelog>
</package>
<package pkgid="973b0112f8b8aa5ee42f00e28bdae4f8af46d3316ec6469faf4107a32fcafd7a" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.1.el7" date="1512043200">- Apply debranding changes</changelog>
</package>
<package pkgid="c34d4b09259d3c76d533f39ec4c9879935d849194b5ad60f65df75e932494efd" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7.centos.plus"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.11.6.el7.centos.plus]" date="1515672000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="3f6350b405515d79168d94771a1dfb5d655569fd58a2d3bc31db9c8210472db7" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7.centos.plus"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.11.6.el7.centos.plus]" date="1515672000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="acd97bd558fee5d5455d3fbb29c04facf55dfa8d4231ae93ad5a17b399470b18" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.6.el7" date="1514980800">- Apply debranding changes</changelog>
</package>
<package pkgid="340f97f9ac30e2e28763bc7b8b5747c786a2afc03bd2330bd5088a0aec441d58" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.6.el7" date="1514980800">- Apply debranding changes</changelog>
</package>
<package pkgid="20589d01affb6ba417252a47b11a58f32d71128301e83afd4361c1f35bf447c8" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="54421b3ff9ab7b826dc33a4756bbf69b1d0be27cd0ad899dc29c72425e40b93f" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="7bcd75ad12a1ce186bfabbd84338e4306ca951fe6e4662012770cdfb47ed6bff" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="1e88126959089df6cc90b7a6b245e6e945b80e408e1ddff7ad39abfe1583a79f" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="00da9618349f00bbde27fcbba199a3f4ee7b3efe73d83100ed7dcae2efc1031d" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="b59fde41492d433532830eedf63bbd01e5d401a28968ac4d7ff8d284ccf4ac25" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7.centos.plus"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.2.2.el7.centos.plus rc1]" date="1505217600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]</changelog>
  <changelog author="T.Kabe &lt;kabe@&gt; [3.10.0-693.2.2.el7.centos.plus rc2]" date="1505908800">- Add i686 mods (i686-7-4.patch) [bug#13890]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.2.2.el7.centos.plus]" date="1506168000">- Enabled xen
- more i686 mod (firmware-efi-32bit.patch) [ay]</changelog>
</package>
<package pkgid="9677c6d97b38f129fbc8f2e33df6e8e08343c5c1c4c706f1e5674951be125744" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7.centos.plus"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.2.2.el7.centos.plus rc1]" date="1505217600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]</changelog>
  <changelog author="T.Kabe &lt;kabe@&gt; [3.10.0-693.2.2.el7.centos.plus rc2]" date="1505908800">- Add i686 mods (i686-7-4.patch) [bug#13890]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.2.2.el7.centos.plus]" date="1506168000">- Enabled xen
- more i686 mod (firmware-efi-32bit.patch) [ay]</changelog>
</package>
<package pkgid="49203c92e1ab4bfcc0d35176eba655e466f7c47223f3007976ca6f7c28315c3b" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="6385e30e99f35e7b627c990c614457bc00ad45b97687b0f1a1f1cdcea13cbf7a" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="14acf1eea6d96ab941d9e0950aa55ff8f877c6851c23ab2c458a79826f5c651e" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="b491ec6d1973b21db9a46de9f784c7cb98a551b9edcfbe3693a2cf5afcaa7645" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="1c97a28f0d1ff3b33cb4861e53de224815cf46bae7bde1650d167132215f9772" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="4c0c82d2cb6499182c569b69b003bb9cc299d7a4e899b800493f968bd2ab6ec3" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="d0661fd736ebcef511a3986623f26397500d1151fb34ca88e04a272af8e5f018" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="ff2aa604e6e6741658649002d4cd3519cfefe8b01815173c74a59e23a13d1941" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="f31f483ff1097f6bf049973b18e15aff18a40d0344adab8c600a7bc0f139750a" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="254fa9e002fb1da38028c7242ac987282db39920f5b876e7465c4a7cea81331a" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="47fb1d33bfef85aa5770097752070465e032448d2b0ad25ee14514f002565c8e" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="d49eecdb0e556b1184dcb666397603e5c40e99b46d2627a35a2b1921b8cf52ef" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="a55ee714616dcb5eea7d0f96c88e6a50c7b220f6c57aec9776c0f4cd12a7fdef" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="e44d696aaf26da7e4358728d57a18f8f9cc2066238346968b4fb19a2cbe64d63" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="813a067df889b65876db7d0bbfa3ea32ab226a5c876e16e0fe7f81a58f4fb929" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="3a767f76a55a49179586eebc8b7d87ec5a1e7e595a7a022790127396368a895d" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="4bdd981fc829ae7c2db31121a0ca433a7f9739969df1087a0a21d4b1b89479e5" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="b5034810f57f2154d334db0214dc9710663d1838e2daba0bac635d7dc9dcf1ff" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="575469f77feebcb530caf594f2ae0306ee3a8d6a46736290bc425b8fd2e99b9c" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="1e8e3b8e54ec0e575d81da530a4e8852f960179b8a61881288387ddd458f01fb" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="8b6293c3639a335736bb891d5c76da813820f3ab17e9b6a9d274f558ff36ddfa" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7.centos.plus"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.5.2.el7.centos.plus]" date="1508414400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="fac8702c571de2b3575682036fd5b96f112d82b90382ca7aefef768c6d3c1f62" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7.centos.plus"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.5.2.el7.centos.plus]" date="1508414400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="cc6c7f6531ad2b05a5ce5897cac46ef27f151d42aa45ab2b34dd72699f69ea0c" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7.centos.plus"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.5.2.el7.centos.plus]" date="1508414400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="f53da0a3612c9549bf602a26730a7c6b99a6575928e034a9ca01dd3e352c0133" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.5.2.el7" date="1508414400">- Apply debranding changes</changelog>
</package>
<package pkgid="7c70344f9ef3265b0b563a2ed72b7ee2b41b7e8451974e36b96f9487b2df5e48" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.5.2.el7" date="1508414400">- Apply debranding changes</changelog>
</package>
<package pkgid="6070155f5765bf30db27a8903c76e58a7ce06ec655308a25d220347c46d4ca02" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.1.1.el7" date="1502798400">- Apply debranding changes</changelog>
</package>
<package pkgid="e7ac14f5e9378b10faad3a28976656f290648dc68b6e7fb8c22d3d3725345780" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7.centos.plus"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.11.1.el7.centos.plus]" date="1512043200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="afed9e8ef24c84d3863e3691a9d28009e43599034d3727858b4d0631442fccdd" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.1.el7" date="1512043200">- Apply debranding changes</changelog>
</package>
<package pkgid="d01b1a364ec788591f311734a4998d55d20a821dc1d0ffddd84e3d9a61e5cb81" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.6.el7" date="1514980800">- Apply debranding changes</changelog>
</package>
<package pkgid="645a93f12b74c6d14acd39007e3f49797aac8b65d3c477835de379ae46c32788" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="29d3483290051994989cbfcedaa736610e7f56abe124cfa76f9307bf1f987cd1" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="efc5b25dd189d8abd791bffa172433c9c5cea44008d38f79c6cb04807e728f86" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="9e2f9b8e66870761727f6e105a3eb1e7ff1f03232552cc19a919c0a20a697cf3" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="b85bfe257464d37efcd18108b9fc94ec3fb8821b6d00ca388b561bc529c7e59e" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="0d55cd612e56a2d01b70cf10d29886a824c60ee0013cedc86482b31542d0d256" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="a1b5a9bfb374f0faf3bc68ed42dcf89a8239fa22a67978d267b57451adfa5d61" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7.centos.plus"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.5.2.el7.centos.plus]" date="1508414400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="d8ce7afcbbdef6956594bc3e0fc533ac778ea660e27c82364b0d1d2339386232" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.5.2.el7" date="1508414400">- Apply debranding changes</changelog>
</package>
<package pkgid="d2de057e9652941144fd2ed42d6afc6830fcbd9f3c9c881ef59480ccd221bc7a" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.1.1.el7" date="1502798400">- Apply debranding changes</changelog>
</package>
<package pkgid="bfefdf20c58e80951e308d9735792c3403f564aba663a2af0320c4168ccc93eb" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.1.el7" date="1512043200">- Apply debranding changes</changelog>
</package>
<package pkgid="2db5dcc7c0dc7766931a6c21ac2ffcf7255c66562c92154765cce7cecf2434b0" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.6.el7" date="1514980800">- Apply debranding changes</changelog>
</package>
<package pkgid="f9b9bf2ad6fbae5cbfac681dab004640adb4b0f7cc64d3cd4af87f6057c21f2c" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="3dae241cfccaf7afcb9c977ef0cb1232b52bc129594d51b61a726cff2e43976c" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="a3d7db0e934ffec45f691a5682f9bcdaa96ee104984897a129681409679cb8d9" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="9e05f65fea0073b9ad20468a596235f1e37d6db683ac1a660da2fbfeeb109d97" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="83019a7f53b9d237f0a8a0f4525fa4d42655bc2f7dc8278574bdfc3485eacdc3" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.5.2.el7" date="1508414400">- Apply debranding changes</changelog>
</package>
<package pkgid="001de7ce6bb9a5d7d866ca2b9d78b5ceb32fbf5fff077d57c361c08ebf65146d" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.1.1.el7" date="1502798400">- Apply debranding changes</changelog>
</package>
<package pkgid="358d10c57e0585ff83667fac87a6c8216d1dd41b4cc1bea379bdbafa80237556" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.1.el7" date="1512043200">- Apply debranding changes</changelog>
</package>
<package pkgid="73c9d4d7db629fde76480dae0c7d355dc94bddc5a104a87af84f19ef95cfb528" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="7fee496a32aaccaaa78dfc597dbcc33673e4d03a8a165b9b5dfb7fcfbe55edf0" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="36b5d1059e64651c53111a4f8e8ca8dbbff22f6827511e8c34e8d3c89088b1d9" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="46dc782b849588c8ee59ededbaf3a86e140a5dad591505e8d12c92ec64dd3b44" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="39e2f84fe5abc512e551fdad2b1aa135ed1a410e052fbe6f5956e193c8891dd6" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.5.2.el7" date="1508414400">- Apply debranding changes</changelog>
</package>
<package pkgid="d6a8a4b6786056253e90f31e332aff3dc75568a2ce17a8f1ca42a01767153e51" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.1.1.el7" date="1502798400">- Apply debranding changes</changelog>
</package>
<package pkgid="1a8b3e464d7d8528f5eacb9c8cf5baf92012c1df9ed6d488837e4d0cb2b690cc" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.1.el7" date="1512043200">- Apply debranding changes</changelog>
</package>
<package pkgid="c3fe4b72d541cd1f0925c70ce7584277c1d7052f4305f08ab6988600cefae14b" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.6.el7" date="1514980800">- Apply debranding changes</changelog>
</package>
<package pkgid="0e6a170ff38559535971f82376f8c8ce4a001d332addb146fe534dae8df4756f" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="787382b8c0daf07aa53b71f7c897dce7e0887cb174dc2858d51e34b82ca58eb3" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="4cb22954e64e52bc36521f9de72f34fa00ac4be0293447fe58a1e53f8f721f2b" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="65f880108642f8a38d7b32064c4796e6674930f9826fae561b00fbf9cadc18c7" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="ab8249293c6af0264f266134ed73fec0cbf9446893ac25962b78c6b968a3649a" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.5.2.el7" date="1508414400">- Apply debranding changes</changelog>
</package>
<package pkgid="84015b64eaf1ca41311fc6ab9f82d215924082b931ad9023412ed142371eb163" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.1.1.el7" date="1502798400">- Apply debranding changes</changelog>
</package>
<package pkgid="a5e8818bb5960c184fc64aad6cf44f3f717fed881cd9524fe517630b17190721" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7.centos.plus"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.11.1.el7.centos.plus]" date="1512043200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="af49e0dcc933b848e589848933941e29c90932a55d3f897e8723e5910c7849a5" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.1.el7" date="1512043200">- Apply debranding changes</changelog>
</package>
<package pkgid="460da34b8a65bcd178efae85e3e9b233bfb157f5dbcb4ba156c395316a983bce" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7.centos.plus"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.11.6.el7.centos.plus]" date="1515672000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="cdea55f05fa155608f9cfbf803102de79099c7f921d62213e7da6b38a33cdcf7" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="e3851f3e88e139125ba5e3ef9540416ce4223098efa9eb2d72eb582a1b9c6e7d" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="c0eaaf45c1fb78cc1fbcc3421d57f174801c919a1623b4a7c90da5b9af8e49be" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7.centos.plus"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.2.2.el7.centos.plus rc1]" date="1505217600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]</changelog>
  <changelog author="T.Kabe &lt;kabe@&gt; [3.10.0-693.2.2.el7.centos.plus rc2]" date="1505908800">- Add i686 mods (i686-7-4.patch) [bug#13890]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.2.2.el7.centos.plus]" date="1506168000">- Enabled xen
- more i686 mod (firmware-efi-32bit.patch) [ay]</changelog>
</package>
<package pkgid="06af8523cc9d01ebe8e21d435759dd0d4f196250518f8ba14140b62946525b6a" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="5c17d7e5673f28fded492859854a2e13e006b078efd040c4b39935afc352ba9d" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="d5b402a473acd27af8f29436d4760ff7dd749de80c2bac52c51eef6ef2f2e4cb" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="d9334113b28f2818883cf9b7075ba434a5368c9fa181eac51e094d8fe04b6416" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="cf406f27921069b74794aa49b6b0b8453719c7623774689e2ebb8e4d7b90d2ea" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="ee88b5a55555162dafa7871cde8d25a8704b2b4c78aaf3542f6f321bb9c06f1c" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="190b43d57a1eb653d241e3a7084592deca9e9cc365214bca290a190406aec75e" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="89ec55725122a8d10ca4def20b2ceda5cf3a4fb12e2f836801fb336ecc819a07" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="d02c83db0b45d8772030824d3c31e14ebfa420779950ccb250a4fc1cb7451db9" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7.centos.plus"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.5.2.el7.centos.plus]" date="1508414400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="dfb69ecfbf432d0bd2ed58116aa6bfca67d35ec0b19c192f223e1aa9782cd2e0" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.5.2.el7" date="1508414400">- Apply debranding changes</changelog>
</package>
<package pkgid="27c5940683a0f37e852ab39bd737f09276fb54bef65ca003c5b27ef98970096e" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7.centos.plus"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.11.1.el7.centos.plus]" date="1512043200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="d3fe62cbf56556566e476e359080ae507308f9115d3b849c80f702780fc4fc0c" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7.centos.plus"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.11.6.el7.centos.plus]" date="1515672000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="c6dfcac7bd779bc6a21b2dc32a3bb2a298a18c38fe24a881e25028ca0782bda4" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7.centos.plus"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.2.2.el7.centos.plus rc1]" date="1505217600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]</changelog>
  <changelog author="T.Kabe &lt;kabe@&gt; [3.10.0-693.2.2.el7.centos.plus rc2]" date="1505908800">- Add i686 mods (i686-7-4.patch) [bug#13890]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.2.2.el7.centos.plus]" date="1506168000">- Enabled xen
- more i686 mod (firmware-efi-32bit.patch) [ay]</changelog>
</package>
<package pkgid="543a11c6ab58f27db396bba88b72cc2a56f207d1224297e7ad56a521b0aa1142" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="4bfe2a5f7b3489bb115da162b352fb38cbacaa3082f0a35afea98601e74d25c1" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="2d52b47087531bbfcc4f01ff7aab70dac537329a4e22ac9e9a99fa550bd04437" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="1dc1c98a7fba25ec0c4b4941e45be97bc42397c2d18ad8447ed32bdd2df34fe1" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="71604b94bf0e848314c303ef9ef8f68e674f38720491785da4420b2c32a085af" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="c949cb346da77f13c7d3fbcc2cb340e8a6eddf2daca8dc9c733e7c604744623c" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="e5843c67100ca30729d59e5fdb10c35def88a233fddaf984bbadfe344f22f813" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7.centos.plus"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.5.2.el7.centos.plus]" date="1508414400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="6f9e18d6e68895fbb5e74071516e3a6f32f1dc917e839a9e0eeff67a80b8d117" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.1.1.el7" date="1502798400">- Apply debranding changes</changelog>
</package>
<package pkgid="a3904269542cf77e27b1b04f3db9caee8bd92af6ac5bab6cec5215b1a3f80629" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.1.el7" date="1512043200">- Apply debranding changes</changelog>
</package>
<package pkgid="6f41674bd9f5c43bff9d8d0e34a27f408b0e1bc5397ab8d50a6b5d1f0c1f8877" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="5be29ee5946c9b1eb970e25245a8c75ff1fc62898f885cdea63f136f77db1861" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="7cb8da68c8997d6ad25aeddc0b3aad0145914bcac48a18c054b9529c0b17c9bf" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="b7e9c27fd33a8049b261f6f9ba9e344f06474348b8cb31aa7f4c8791f6d3688c" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="f1456654e655017ef0101298507701c4b04b1f0679eb5e43cd2e6c8f04b7b379" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.5.2.el7" date="1508414400">- Apply debranding changes</changelog>
</package>
<package pkgid="2c92368ac1a250578426887bd52d2c59ef2988e8fa54f18a41b3a3171d2d4730" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.1.1.el7" date="1502798400">- Apply debranding changes</changelog>
</package>
<package pkgid="62822a2f824beeb095273e67d3bb065063264be46f1d0c4b9bf3399f1647984e" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7.centos.plus"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.11.1.el7.centos.plus]" date="1512043200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="569d94ee55f09032507ebaa04dae5e3c5ff2815773b030371a25b9257f37295a" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.1.el7" date="1512043200">- Apply debranding changes</changelog>
</package>
<package pkgid="14f1cb6bb1622870c083f32899875d5906e8e59e6de8063bf54b09423faef91e" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7.centos.plus"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.11.6.el7.centos.plus]" date="1515672000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="207114103388da22bda5fbe798f8662e2a69aea6611bf6a97881de0cf51182bf" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.6.el7" date="1514980800">- Apply debranding changes</changelog>
</package>
<package pkgid="302361760ad745ff37a6c7aa3ad4c63c09016282377e20b9d04871797cebe2cb" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="6d4e79885605a053c3774e76033f319cad5f718835fc52e58aaa6f2aa5c0c591" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="1a72d3298e7ffd29ea84d1430d39630d2211b6f2e1948bc0ba21d8ea8fc077f1" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7.centos.plus"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.2.2.el7.centos.plus rc1]" date="1505217600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]</changelog>
  <changelog author="T.Kabe &lt;kabe@&gt; [3.10.0-693.2.2.el7.centos.plus rc2]" date="1505908800">- Add i686 mods (i686-7-4.patch) [bug#13890]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.2.2.el7.centos.plus]" date="1506168000">- Enabled xen
- more i686 mod (firmware-efi-32bit.patch) [ay]</changelog>
</package>
<package pkgid="13c73ab60367e5bc7cfb5e427a6e9a1eee431036511c678ca1516aca4d37338a" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="8bf9096a2e237868e98428f9010d163f960d62ebaa110c7d070171a78dfd3c14" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="01090e63f12780e89170f9a763510bfb1f42f74e061d0c1012eeca5b4b0aeb36" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="3caad5bf6edbf32e74511ea25fb1b398674bf26f801d03e62b9ca5b351853114" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="37f650e5c82f1cebf3829248d19e4f763b065d18b4f2bed7225c0000d3c47bcf" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="4fc16d754779fde30a376a50d2ea242e54104a1a76206409f56143471077f22f" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="bc9fd718de9065c68927f648de25489e3eeeaed9250f110d5e03c79b24f7a5c0" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="d2bdcfe4699001beb4e5499350c4d444e7a37eb3609d0d446f6ebe81f162b747" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="e083ed40a985d2cf0d7283246a2eb3a9bd43312cf1b654ff8e423fca8f3cff85" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7.centos.plus"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.5.2.el7.centos.plus]" date="1508414400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="c3473fe14a08d5915578d44c79377b9d95812a7493a1cfce63881836b5ef5b0b" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.5.2.el7" date="1508414400">- Apply debranding changes</changelog>
</package>
<package pkgid="4bd3c3c7b2d85e7ea4daf90afaee7775807a05d91a2b9d20ef93fddd1ef7b437" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.1.1.el7" date="1502798400">- Apply debranding changes</changelog>
</package>
<package pkgid="ab0987e65a6451be5de0d72bfd2599c704298c55378c7f511535282f63f75bb0" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7.centos.plus"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.11.1.el7.centos.plus]" date="1512043200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="85683ae3e6af0f62e94244c67e26093108b7b5fc4106d534af5a487f12369124" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.1.el7" date="1512043200">- Apply debranding changes</changelog>
</package>
<package pkgid="a08365f18d3243f0e323464ca19f85f784955eaa44793394fb298db8fdd53e66" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.6.el7" date="1514980800">- Apply debranding changes</changelog>
</package>
<package pkgid="67a761f0172b90d5d8731ef6b811f2013f35c4aa24cdb827aa49799432cb4313" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="b7e462ba036572d263b7a1e4354a894b2d04ceb907fc3b9713321dc6f8d3aee3" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="91706a952f70c3319417902ec44f3394f23f9eb8a649bc8654e3301158cd3a25" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="da05b73c553c11864d0e0c378aec989ee8a5630826b30aa67f1fe8c31345b86d" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="e7c70e4a41c1ed454ebc471d1f7128a1e3125da726de0d61cd06ec6a1786a5f6" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="18d08bb80feb98717cb1944b1bd5b8097838649badb621234067eefc1102d13e" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="da939d785749cdac043362df618c6d45abc8bfab24df53f089f557bc6a7738bd" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7.centos.plus"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.5.2.el7.centos.plus]" date="1508414400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="5981bae63cd3a6c0a14f115a995d580c1ca67e97b804596f598e58e40f6b637e" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.5.2.el7" date="1508414400">- Apply debranding changes</changelog>
</package>
<package pkgid="3a53b93c1c310f243c771df252314247e1994d1c9fefa95984a8349928cd63a0" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.1.1.el7" date="1502798400">- Apply debranding changes</changelog>
</package>
<package pkgid="3cdc7708a10006b2175c22af1c7a350c120d7311a5942716f47370600a70e534" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7.centos.plus"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.11.1.el7.centos.plus]" date="1512043200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="2766f67291096db24aa05c2de0450997054ba2e06f7ec82ee324eb890f413a68" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.1.el7" date="1512043200">- Apply debranding changes</changelog>
</package>
<package pkgid="3a3fa0ae9c4c71750f1322be0140a21906dd5b1e58096b6110a63c43f28f8dde" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7.centos.plus"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.11.6.el7.centos.plus]" date="1515672000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="c2893d560182ae1644be8b4dc9ae5af76ba36818b12ce5e5b5871fb8e976a630" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.6.el7" date="1514980800">- Apply debranding changes</changelog>
</package>
<package pkgid="6e96a152888ab1c004e011fe6f834150d612cc478fccf6a1393be7070269bb97" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="d78b1a12642e58af946e6435289374af198169f9002cdce1a98ffb1c9a3d797e" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="2bb2fe131477612a54cd4c89b70e3cd5d3d5c1f86387ac9bee86dde8f04b6c72" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="433b5c52d219946c84dde55bb7b78f93572d37c1bd3416df01e0f00de077092b" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7.centos.plus"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.2.2.el7.centos.plus rc1]" date="1505217600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]</changelog>
  <changelog author="T.Kabe &lt;kabe@&gt; [3.10.0-693.2.2.el7.centos.plus rc2]" date="1505908800">- Add i686 mods (i686-7-4.patch) [bug#13890]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.2.2.el7.centos.plus]" date="1506168000">- Enabled xen
- more i686 mod (firmware-efi-32bit.patch) [ay]</changelog>
</package>
<package pkgid="23f03215f818bf26d8ef278f9af9c0845c7bcdb3440b7fa72ab6b018672fd1f5" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="f7f0172c1f2c02a71bc8b65219e441ecb5874d83e0e34e8d3600d2e85e9b104d" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="482b1bc8c00e093aa26a2a4e757e33edc1247700429218dca459a201799ababc" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="4743a8eea5eea4b98c870bad67d13205bd6c88cf57bce3d73360dadc48cc2f5f" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="9135bec9864a14fcfac4a528ef15f489a62b17756f37d3a36843fcb7d8a5ee16" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="a92377e87a869f82adacfc13ee8a0bceedf7ddd102dbde54422ce6bbb70d7b7a" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="81477da64c2ba674c722d6514a0cfc85bb8961750dee8749e6fdc8cc7f68ef75" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="30fba9a1689bf30b140585e7171b76b6b78598412d9806ebf850c0db34f97876" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="568d9b9ea71743d5b438dc97e03bcf93cc7c355529d9f299b4121be9d7a1766d" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="c4dcc76562d442c146cdd66d9c8ba81bd2f3be0f1f285a40c00a07413b76eb4a" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="bda370cbc0e83caa081db4242e6b07e19e31a62393d05a8a9711ecec823bd05c" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7.centos.plus"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.5.2.el7.centos.plus]" date="1508414400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="1d757b4416eac649efaadb32a87411839615cebe54f91569bc7c5cd45f394a3e" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.5.2.el7" date="1508414400">- Apply debranding changes</changelog>
</package>
<package pkgid="97fc4499009afc378dfa3669afb5aa937d2ba4e28daa7d4cc95d5f9095e98d6e" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.1.1.el7" date="1502798400">- Apply debranding changes</changelog>
</package>
<package pkgid="025cd07faf673a69b44b0fdc445121064b2ddfbf3a7445f5598e2c46190ed4d5" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7.centos.plus"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.11.1.el7.centos.plus]" date="1512043200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="4b1c012d581d489d24fc96f7c340e6eee0e5859bb85150dba92918a613bba117" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.1.el7" date="1512043200">- Apply debranding changes</changelog>
</package>
<package pkgid="61c65fef8cba178a57aa55d8887723d1fe07ca685419521c063944af57ac233f" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7.centos.plus"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.11.6.el7.centos.plus]" date="1515672000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="d0584c4a849a5e559149afed2435ce1e73813c56030c837d7321d4aacffbbbd5" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.6.el7" date="1514980800">- Apply debranding changes</changelog>
</package>
<package pkgid="1163adc64fefead079851fa275edaa412a60d3e85f0b06ad6700aa4fda8ca692" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="9788037b8f0ff6ab1cb7e07acbee5f2181e105625f2cd180cee76bb5898c65ed" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="5042353958ba3e11ea6349f2d35f8eb70db9253a6ddce91a7f68b4156336c33a" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7.centos.plus"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.2.2.el7.centos.plus rc1]" date="1505217600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]</changelog>
  <changelog author="T.Kabe &lt;kabe@&gt; [3.10.0-693.2.2.el7.centos.plus rc2]" date="1505908800">- Add i686 mods (i686-7-4.patch) [bug#13890]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.2.2.el7.centos.plus]" date="1506168000">- Enabled xen
- more i686 mod (firmware-efi-32bit.patch) [ay]</changelog>
</package>
<package pkgid="1967935d6f301feb918cba351cb64678b9ba083ae61bd1f87a2dc5e6ddbabae9" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="54c3d1ad0528fd98a7d97205c2be878b2825c95d6b1724d1d60c2164a1a10705" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="5125eb08ea08104a7f024d0f818bac5206cb17ca805c22ab6fef787b35e52e1e" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="dbacb06d0994c7b3fb41bc4919ff2da8d397418a6858b61a49a17148bd4e76b8" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="aa02e55d46d7762b74f5e373b8b3f42e6d2d05a7ad2fd4b3e7fc0d32a36e650b" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="2121baa0cba76dc4d8f028795f44f88912a71e6ca0939e60f3747e4205f0a160" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="d55ce70ac8498e1dac84449ca042081a17fbe606233eea93db8558cf7a3360d2" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="d4d514de735b7c12c0d00a6af4517a9ddce505a4f29046fabeab689a4ac4c765" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="b6d4a56203ef5323631afd31340a2dada9392152794d5acfb49fe16c8bf197a3" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7.centos.plus"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.5.2.el7.centos.plus]" date="1508414400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="a4e8494e9a57cadb16b51402500f4de6794af79c3b830809ee5e575095968f98" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.5.2.el7" date="1508414400">- Apply debranding changes</changelog>
</package>
<package pkgid="9d639eb5cb6aee839da8b21cf6b6a9bfda63162f9496a9f82219998b3780126e" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.1.1.el7" date="1502798400">- Apply debranding changes</changelog>
</package>
<package pkgid="ddbde61c80a230dba1a86110db868b5c7a4b01ddaaf72b0365d3bcf9aab14fd1" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7.centos.plus"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.11.1.el7.centos.plus]" date="1512043200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="3a06b2a7f9b1a0757f28383f94efec46afb083290419d2a227627aaa6deec724" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.1.el7" date="1512043200">- Apply debranding changes</changelog>
</package>
<package pkgid="d0f0b76db24429eb17c4f9379c1ce739e1ccd946a71206351fcf5bb3c1bac0e6" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7.centos.plus"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.11.6.el7.centos.plus]" date="1515672000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="b5ce96d253f12b818b1409f8468a2979fb51cbd8aaf65af391b9990cca6e50a3" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="04bfded3d7972ccbbbc33d1f70013b8fd4b43d3cdc0a65fdd1ad9e6b87c8d35e" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="07ca30572978269100d7035be25f6fe62070f239391818193ee3032fabcbb7af" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7.centos.plus"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.2.2.el7.centos.plus rc1]" date="1505217600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]</changelog>
  <changelog author="T.Kabe &lt;kabe@&gt; [3.10.0-693.2.2.el7.centos.plus rc2]" date="1505908800">- Add i686 mods (i686-7-4.patch) [bug#13890]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.2.2.el7.centos.plus]" date="1506168000">- Enabled xen
- more i686 mod (firmware-efi-32bit.patch) [ay]</changelog>
</package>
<package pkgid="06e841dbf7b30c697fbbfa9f1db46774ab6a07f661a4f3a1e0f8af217f1da49f" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="ac0b28b8c87d51a050f9b6751dc62cb5896059166c0aeac271e1a05130d41c91" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="bef9179f46407c0c8399c99b33d9e011345a1523c45c0703ef0bc385446cd673" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="d3d3a9394cd02e3ee3703137766f4822659209de62fb89be9f6764acca84581a" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="b8dc554703bfd4ab98c6572945d949e294ed972558f450cd74fd540415cd96c2" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="646811811ad0caac93fd0ae2bf4bf17059e381d1b02ace1e1af01f110f0d263e" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="161549f56a2ba9d4beb78884c5ea7d644683256751afbc6a40da39cd0a3b7656" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="32cd944c497112863899495ad757843483e5c6ba961b0eb60adda86c4e1a5cd3" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="80eeeba57863a406245dc19914303043590bad4965de9f09e91e3dcd44ff2364" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7.centos.plus"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.5.2.el7.centos.plus]" date="1508414400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="63cd39750caa49b4e885eae1c33e06500bada637cc4a829f36c15af8065f2ab6" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.5.2.el7" date="1508414400">- Apply debranding changes</changelog>
</package>
<package pkgid="abf3d606d957af9831eeeb5c8fcb8c5a25969308f7a957de2f701e7d1e6f6b07" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.1.1.el7" date="1502798400">- Apply debranding changes</changelog>
</package>
<package pkgid="02b019c45e4499e8b1d0a7d4937a326db20a8344125c65d6c00e3f040eb3ac1d" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7.centos.plus"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.11.1.el7.centos.plus]" date="1512043200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="6b40fd6da6133ae01133af304885638f98b61615ee04f38da15d9a7a057d917c" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.1.el7" date="1512043200">- Apply debranding changes</changelog>
</package>
<package pkgid="49698227fc04f4a34efd9d6d4b5ab8477372a0282aa5bf5038a7f4cc807b85d1" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7.centos.plus"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.11.6.el7.centos.plus]" date="1515672000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="1245b78fec0bfdcac51577a481aca39ed3573dce57a5940ab92cbd1c5438c8f4" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.6.el7" date="1514980800">- Apply debranding changes</changelog>
</package>
<package pkgid="c58fd0e366dbd241d844680f1c1d8ebe3a32d8ad3032ba10236491964de2b9ce" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="8093b6ff2638ce42ec182af51eb33a271366ec9be5ecd8e3f8b65c945b9faa3e" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="024200a82f356b5fb42aff3ebd88e792ad1ffc2ebd71b416d87b555652f1e880" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7.centos.plus"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.2.2.el7.centos.plus rc1]" date="1505217600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]</changelog>
  <changelog author="T.Kabe &lt;kabe@&gt; [3.10.0-693.2.2.el7.centos.plus rc2]" date="1505908800">- Add i686 mods (i686-7-4.patch) [bug#13890]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.2.2.el7.centos.plus]" date="1506168000">- Enabled xen
- more i686 mod (firmware-efi-32bit.patch) [ay]</changelog>
</package>
<package pkgid="63578df7d82ec4959abb2364c30df87f7719cde747271cba892a7e0e66b7b4fd" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="c47e7c6fda14ac83efeeeead5489051f7a136b5c2c33f89ec577722b90b19c99" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="dcb70f640e6cf1e144bb64ce5e47914b6061a73f08acacc84fb3c55b1231af3d" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="7f166458a9767109a3fb2402ab486f2c5b33ef5962ed3d5463d910453cab4d88" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="f389d6b0528972fdeab6b0f86d134731a28aead71993624aa4762c47b0935402" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="d39be50fdaf7714bcf386dc7f56da1dd0b694ede457e3f66b4e4cebb129a0a84" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="1c0489051393f4b3e922afccdf5a43226658809e38079cd17fb36df09a689e87" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="5eaec866d01d6b037cfb6bffc68bae3964f8c0e8ee36b1b1879d220976c059be" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="52783b8e42a9ca4cc612b6367928ef829cb6248e59621907c4a65c1c386b4aca" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7.centos.plus"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.5.2.el7.centos.plus]" date="1508414400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="4088abdc408fb6966b145b9206966de6d9e459850ffc74337dfaf73ccd5495ee" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.5.2.el7" date="1508414400">- Apply debranding changes</changelog>
</package>
<package pkgid="69b53be70ddcd431da941c2338558b1beb3ecb51027df01d1dbb3c4cd48667a2" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.1.1.el7" date="1502798400">- Apply debranding changes</changelog>
</package>
<package pkgid="40481aa59888c1326f8a9aa4a89b399b6f770a75a9551909cabd0517d821889b" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7.centos.plus"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.11.1.el7.centos.plus]" date="1512043200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="46e2287d2aa4221456db3cdb83b50d7a10f8a0c1494fc150c07e66bb63097fe8" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.1.el7" date="1512043200">- Apply debranding changes</changelog>
</package>
<package pkgid="55b6ba23d186e5a1ea6711d9ba4fb06aa9e1b0faacdf939896a7415c7a04dbff" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7.centos.plus"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.11.6.el7.centos.plus]" date="1515672000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="d46815bba12757623d43de7931dcb577a166915834f14658ca2163c937b8b492" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.6.el7" date="1514980800">- Apply debranding changes</changelog>
</package>
<package pkgid="f9cdb612e05957e2c26e32f8403b4b71d8e283d4ddc57102b89c159f29064a74" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="bebe107b8eede0f8e3f3d4f4931cbbb5fe54065466ae0409496330e82b37f524" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="1a3062be6d6775574abd4a5be82c2ef547b6142ee17c82c40436d1709b9dda4a" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7.centos.plus"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.2.2.el7.centos.plus rc1]" date="1505217600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]</changelog>
  <changelog author="T.Kabe &lt;kabe@&gt; [3.10.0-693.2.2.el7.centos.plus rc2]" date="1505908800">- Add i686 mods (i686-7-4.patch) [bug#13890]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.2.2.el7.centos.plus]" date="1506168000">- Enabled xen
- more i686 mod (firmware-efi-32bit.patch) [ay]</changelog>
</package>
<package pkgid="425754303981aed063d08e1ca02b891405916d92e06517f8974e8a60bfa8fd1e" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="2f801bc6ba76bf79d09dac708ef6297a71ffaca3a4f8c1dd7af8822949fa4029" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="4ed5bf4fd63ea7eb78328aa9b8eca9d9ec005fdeab86ee1605435cd42d8e6f29" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="2dda1659d2bfa1cdc5874ffad5f96bdc62b09e927f8dc412f2dab0c92af63c6d" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="633380518316831fdbcc308c6f51f1fe9de8c119304e95bfbaee718f85532303" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="88d4f809392ff0b67e938ffc535a6d996801b4a0c40cfa64c03dd0532568dd4d" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="eab4632f6cdc33a6a9d86feea4454a9a30db84de3fafe4da6862c03731f9c297" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="010a6b1bbbe8a3d021efe4b7a385b04067ff7786c4921cd4a45477fbdbce1e37" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="b4c0c4a3879d0f3c6d5272f41682535825df350e332266ef201568f72a1748b3" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7.centos.plus"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.5.2.el7.centos.plus]" date="1508414400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="3c8db53460dc7be7ce8be4ad826b5b55a6daee7002509c5d65e393983f9ea526" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.5.2.el7" date="1508414400">- Apply debranding changes</changelog>
</package>
<package pkgid="aa7db5a2b5a927cc5ec418c6169914a41242f35a24265937b082201e5f04a65b" name="kexec-tools" arch="i686">
  <version epoch="0" ver="2.0.14" rel="17.2.el7"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-10" date="1494849600">- kdumpctl: call strip_comments only when necessary to speedup
- Revert "kdumpctl: improve "while read" time for /etc/kdump.conf"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-11" date="1496232000">- makedumpfile: Fix refiltering, sadump and virsh dump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-12" date="1496318400">- kdump.sysconfig.x86_64: remove kaslr in kdump kernel cmdline
- Revert commit b590153 kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-13" date="1496836800">- kdumpctl: change the shebang header to use /bin/bash</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-14" date="1497268800">- kdump.conf.5: clarify the fence_kdump_nodes option
- kdumpctl: for fence_kdump, the ipaddr of this node should be excluded from list</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-15" date="1498132800">- Revert "pc64/ppc64le: drop cpu online rule in 40-redhat.rules in kdump initramfs"
- udev rules: mask cpu hotplug rules</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-16" date="1498219200">- udev rules: fix the hotplug rule file removing path</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17" date="1498564800">- revert udev rule changes</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17.1" date="1505476800">- fadump: rebuild default initrd with dump capture capability</changelog>
  <changelog author="Baoquan He &lt;bhe@redhat.com&gt; 2.0.14-17.2" date="1506427200">- tools: powerpc: fix command line overflow error</changelog>
</package>
<package pkgid="e8ed3a694d183ac6b427c5a8e959d5161d0a7fa83c45a54215b8fde5546adeb2" name="kexec-tools" arch="src">
  <version epoch="0" ver="2.0.14" rel="17.2.el7"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-10" date="1494849600">- kdumpctl: call strip_comments only when necessary to speedup
- Revert "kdumpctl: improve "while read" time for /etc/kdump.conf"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-11" date="1496232000">- makedumpfile: Fix refiltering, sadump and virsh dump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-12" date="1496318400">- kdump.sysconfig.x86_64: remove kaslr in kdump kernel cmdline
- Revert commit b590153 kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-13" date="1496836800">- kdumpctl: change the shebang header to use /bin/bash</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-14" date="1497268800">- kdump.conf.5: clarify the fence_kdump_nodes option
- kdumpctl: for fence_kdump, the ipaddr of this node should be excluded from list</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-15" date="1498132800">- Revert "pc64/ppc64le: drop cpu online rule in 40-redhat.rules in kdump initramfs"
- udev rules: mask cpu hotplug rules</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-16" date="1498219200">- udev rules: fix the hotplug rule file removing path</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17" date="1498564800">- revert udev rule changes</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17.1" date="1505476800">- fadump: rebuild default initrd with dump capture capability</changelog>
  <changelog author="Baoquan He &lt;bhe@redhat.com&gt; 2.0.14-17.2" date="1506427200">- tools: powerpc: fix command line overflow error</changelog>
</package>
<package pkgid="8d27e7112d472d522170d6465a24aed94ebdae31286173c5a64decee033db63a" name="kexec-tools" arch="src">
  <version epoch="0" ver="2.0.14" rel="17.2.el7"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-10" date="1494849600">- kdumpctl: call strip_comments only when necessary to speedup
- Revert "kdumpctl: improve "while read" time for /etc/kdump.conf"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-11" date="1496232000">- makedumpfile: Fix refiltering, sadump and virsh dump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-12" date="1496318400">- kdump.sysconfig.x86_64: remove kaslr in kdump kernel cmdline
- Revert commit b590153 kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-13" date="1496836800">- kdumpctl: change the shebang header to use /bin/bash</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-14" date="1497268800">- kdump.conf.5: clarify the fence_kdump_nodes option
- kdumpctl: for fence_kdump, the ipaddr of this node should be excluded from list</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-15" date="1498132800">- Revert "pc64/ppc64le: drop cpu online rule in 40-redhat.rules in kdump initramfs"
- udev rules: mask cpu hotplug rules</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-16" date="1498219200">- udev rules: fix the hotplug rule file removing path</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17" date="1498564800">- revert udev rule changes</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17.1" date="1505476800">- fadump: rebuild default initrd with dump capture capability</changelog>
  <changelog author="Baoquan He &lt;bhe@redhat.com&gt; 2.0.14-17.2" date="1506427200">- tools: powerpc: fix command line overflow error</changelog>
</package>
<package pkgid="584ed062b5a22b783a68d76a0eaacca7fb1afbda7ef0f2434c7176ebc315dc0c" name="kexec-tools" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="17.2.el7"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-10" date="1494849600">- kdumpctl: call strip_comments only when necessary to speedup
- Revert "kdumpctl: improve "while read" time for /etc/kdump.conf"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-11" date="1496232000">- makedumpfile: Fix refiltering, sadump and virsh dump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-12" date="1496318400">- kdump.sysconfig.x86_64: remove kaslr in kdump kernel cmdline
- Revert commit b590153 kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-13" date="1496836800">- kdumpctl: change the shebang header to use /bin/bash</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-14" date="1497268800">- kdump.conf.5: clarify the fence_kdump_nodes option
- kdumpctl: for fence_kdump, the ipaddr of this node should be excluded from list</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-15" date="1498132800">- Revert "pc64/ppc64le: drop cpu online rule in 40-redhat.rules in kdump initramfs"
- udev rules: mask cpu hotplug rules</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-16" date="1498219200">- udev rules: fix the hotplug rule file removing path</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17" date="1498564800">- revert udev rule changes</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17.1" date="1505476800">- fadump: rebuild default initrd with dump capture capability</changelog>
  <changelog author="Baoquan He &lt;bhe@redhat.com&gt; 2.0.14-17.2" date="1506427200">- tools: powerpc: fix command line overflow error</changelog>
</package>
<package pkgid="7037752b8b777d30bdf488d5a3eaf4f922ba76b42031aca72efe90a9d2a77ba7" name="kexec-tools-anaconda-addon" arch="i686">
  <version epoch="0" ver="2.0.14" rel="17.2.el7"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-10" date="1494849600">- kdumpctl: call strip_comments only when necessary to speedup
- Revert "kdumpctl: improve "while read" time for /etc/kdump.conf"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-11" date="1496232000">- makedumpfile: Fix refiltering, sadump and virsh dump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-12" date="1496318400">- kdump.sysconfig.x86_64: remove kaslr in kdump kernel cmdline
- Revert commit b590153 kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-13" date="1496836800">- kdumpctl: change the shebang header to use /bin/bash</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-14" date="1497268800">- kdump.conf.5: clarify the fence_kdump_nodes option
- kdumpctl: for fence_kdump, the ipaddr of this node should be excluded from list</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-15" date="1498132800">- Revert "pc64/ppc64le: drop cpu online rule in 40-redhat.rules in kdump initramfs"
- udev rules: mask cpu hotplug rules</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-16" date="1498219200">- udev rules: fix the hotplug rule file removing path</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17" date="1498564800">- revert udev rule changes</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17.1" date="1505476800">- fadump: rebuild default initrd with dump capture capability</changelog>
  <changelog author="Baoquan He &lt;bhe@redhat.com&gt; 2.0.14-17.2" date="1506427200">- tools: powerpc: fix command line overflow error</changelog>
</package>
<package pkgid="40a2e3d91d4caa7d66abdd11e1407e429230c7b32b761548773bd11cded058c6" name="kexec-tools-anaconda-addon" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="17.2.el7"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-10" date="1494849600">- kdumpctl: call strip_comments only when necessary to speedup
- Revert "kdumpctl: improve "while read" time for /etc/kdump.conf"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-11" date="1496232000">- makedumpfile: Fix refiltering, sadump and virsh dump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-12" date="1496318400">- kdump.sysconfig.x86_64: remove kaslr in kdump kernel cmdline
- Revert commit b590153 kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-13" date="1496836800">- kdumpctl: change the shebang header to use /bin/bash</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-14" date="1497268800">- kdump.conf.5: clarify the fence_kdump_nodes option
- kdumpctl: for fence_kdump, the ipaddr of this node should be excluded from list</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-15" date="1498132800">- Revert "pc64/ppc64le: drop cpu online rule in 40-redhat.rules in kdump initramfs"
- udev rules: mask cpu hotplug rules</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-16" date="1498219200">- udev rules: fix the hotplug rule file removing path</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17" date="1498564800">- revert udev rule changes</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17.1" date="1505476800">- fadump: rebuild default initrd with dump capture capability</changelog>
  <changelog author="Baoquan He &lt;bhe@redhat.com&gt; 2.0.14-17.2" date="1506427200">- tools: powerpc: fix command line overflow error</changelog>
</package>
<package pkgid="5f138ce05849775936bf131e0ebfa7e5f112885d289b9d6f05398d093134b591" name="kexec-tools-debuginfo" arch="i686">
  <version epoch="0" ver="2.0.14" rel="17.2.el7"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-10" date="1494849600">- kdumpctl: call strip_comments only when necessary to speedup
- Revert "kdumpctl: improve "while read" time for /etc/kdump.conf"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-11" date="1496232000">- makedumpfile: Fix refiltering, sadump and virsh dump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-12" date="1496318400">- kdump.sysconfig.x86_64: remove kaslr in kdump kernel cmdline
- Revert commit b590153 kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-13" date="1496836800">- kdumpctl: change the shebang header to use /bin/bash</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-14" date="1497268800">- kdump.conf.5: clarify the fence_kdump_nodes option
- kdumpctl: for fence_kdump, the ipaddr of this node should be excluded from list</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-15" date="1498132800">- Revert "pc64/ppc64le: drop cpu online rule in 40-redhat.rules in kdump initramfs"
- udev rules: mask cpu hotplug rules</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-16" date="1498219200">- udev rules: fix the hotplug rule file removing path</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17" date="1498564800">- revert udev rule changes</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17.1" date="1505476800">- fadump: rebuild default initrd with dump capture capability</changelog>
  <changelog author="Baoquan He &lt;bhe@redhat.com&gt; 2.0.14-17.2" date="1506427200">- tools: powerpc: fix command line overflow error</changelog>
</package>
<package pkgid="a0f6650b6c46a6e7cb648d6cb918a61ae2105f2891423f503fc34d2edeb9699c" name="kexec-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="17.2.el7"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-10" date="1494849600">- kdumpctl: call strip_comments only when necessary to speedup
- Revert "kdumpctl: improve "while read" time for /etc/kdump.conf"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-11" date="1496232000">- makedumpfile: Fix refiltering, sadump and virsh dump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-12" date="1496318400">- kdump.sysconfig.x86_64: remove kaslr in kdump kernel cmdline
- Revert commit b590153 kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-13" date="1496836800">- kdumpctl: change the shebang header to use /bin/bash</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-14" date="1497268800">- kdump.conf.5: clarify the fence_kdump_nodes option
- kdumpctl: for fence_kdump, the ipaddr of this node should be excluded from list</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-15" date="1498132800">- Revert "pc64/ppc64le: drop cpu online rule in 40-redhat.rules in kdump initramfs"
- udev rules: mask cpu hotplug rules</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-16" date="1498219200">- udev rules: fix the hotplug rule file removing path</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17" date="1498564800">- revert udev rule changes</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17.1" date="1505476800">- fadump: rebuild default initrd with dump capture capability</changelog>
  <changelog author="Baoquan He &lt;bhe@redhat.com&gt; 2.0.14-17.2" date="1506427200">- tools: powerpc: fix command line overflow error</changelog>
</package>
<package pkgid="697c7e8e664c4360d0f3828baa54d2206ee086f080a886e59f0dd8cec07e2f08" name="kexec-tools-eppic" arch="i686">
  <version epoch="0" ver="2.0.14" rel="17.2.el7"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-10" date="1494849600">- kdumpctl: call strip_comments only when necessary to speedup
- Revert "kdumpctl: improve "while read" time for /etc/kdump.conf"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-11" date="1496232000">- makedumpfile: Fix refiltering, sadump and virsh dump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-12" date="1496318400">- kdump.sysconfig.x86_64: remove kaslr in kdump kernel cmdline
- Revert commit b590153 kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-13" date="1496836800">- kdumpctl: change the shebang header to use /bin/bash</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-14" date="1497268800">- kdump.conf.5: clarify the fence_kdump_nodes option
- kdumpctl: for fence_kdump, the ipaddr of this node should be excluded from list</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-15" date="1498132800">- Revert "pc64/ppc64le: drop cpu online rule in 40-redhat.rules in kdump initramfs"
- udev rules: mask cpu hotplug rules</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-16" date="1498219200">- udev rules: fix the hotplug rule file removing path</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17" date="1498564800">- revert udev rule changes</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17.1" date="1505476800">- fadump: rebuild default initrd with dump capture capability</changelog>
  <changelog author="Baoquan He &lt;bhe@redhat.com&gt; 2.0.14-17.2" date="1506427200">- tools: powerpc: fix command line overflow error</changelog>
</package>
<package pkgid="eff252123e3cb606d90836a0124e19b95202a38bb62e7e5a009602facc336b26" name="kexec-tools-eppic" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="17.2.el7"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-10" date="1494849600">- kdumpctl: call strip_comments only when necessary to speedup
- Revert "kdumpctl: improve "while read" time for /etc/kdump.conf"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-11" date="1496232000">- makedumpfile: Fix refiltering, sadump and virsh dump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-12" date="1496318400">- kdump.sysconfig.x86_64: remove kaslr in kdump kernel cmdline
- Revert commit b590153 kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-13" date="1496836800">- kdumpctl: change the shebang header to use /bin/bash</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-14" date="1497268800">- kdump.conf.5: clarify the fence_kdump_nodes option
- kdumpctl: for fence_kdump, the ipaddr of this node should be excluded from list</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-15" date="1498132800">- Revert "pc64/ppc64le: drop cpu online rule in 40-redhat.rules in kdump initramfs"
- udev rules: mask cpu hotplug rules</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-16" date="1498219200">- udev rules: fix the hotplug rule file removing path</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17" date="1498564800">- revert udev rule changes</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17.1" date="1505476800">- fadump: rebuild default initrd with dump capture capability</changelog>
  <changelog author="Baoquan He &lt;bhe@redhat.com&gt; 2.0.14-17.2" date="1506427200">- tools: powerpc: fix command line overflow error</changelog>
</package>
<package pkgid="24f1859ad430dd2f44c4772bb25259739ff64784c38cb4512739d1416fca0175" name="kmod" arch="i686">
  <version epoch="0" ver="20" rel="15.el7_4.1"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-7" date="1466856000">- Backported some needed fixes.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-9" date="1472817600">- Must be bumped to 20-9 due to changes and version bumps in the
  7.2-z stream.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-10" date="1480334400">- weak-modules: deprecate --delete-modules switch.
- weak-modules: implement some pathes configuration from cmdline.
- weak-modules: redesign to reuse depmod -aeE functionality
  (with some preparation changes).
  This is an updated version of the script which doesn't support
  multiple installation of the same out-of-tree module (stored in the
  'extra' subdirectory). But it more correctly checks dependencies
  between the modules.
  Resolves: rhbz#1367942</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
</package>
<package pkgid="74053f7077d052641151d73a614afb10c74252d5ac06c45c89e45cbc6c01d0d8" name="kmod" arch="src">
  <version epoch="0" ver="20" rel="15.el7_4.1"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-7" date="1466856000">- Backported some needed fixes.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-9" date="1472817600">- Must be bumped to 20-9 due to changes and version bumps in the
  7.2-z stream.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-10" date="1480334400">- weak-modules: deprecate --delete-modules switch.
- weak-modules: implement some pathes configuration from cmdline.
- weak-modules: redesign to reuse depmod -aeE functionality
  (with some preparation changes).
  This is an updated version of the script which doesn't support
  multiple installation of the same out-of-tree module (stored in the
  'extra' subdirectory). But it more correctly checks dependencies
  between the modules.
  Resolves: rhbz#1367942</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
</package>
<package pkgid="1c51ad41ce916d9a686b65e3b77a67bf8ac219a62f7f0fd9574ccc7d8bf97331" name="kmod" arch="src">
  <version epoch="0" ver="20" rel="15.el7_4.1"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-7" date="1466856000">- Backported some needed fixes.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-9" date="1472817600">- Must be bumped to 20-9 due to changes and version bumps in the
  7.2-z stream.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-10" date="1480334400">- weak-modules: deprecate --delete-modules switch.
- weak-modules: implement some pathes configuration from cmdline.
- weak-modules: redesign to reuse depmod -aeE functionality
  (with some preparation changes).
  This is an updated version of the script which doesn't support
  multiple installation of the same out-of-tree module (stored in the
  'extra' subdirectory). But it more correctly checks dependencies
  between the modules.
  Resolves: rhbz#1367942</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
</package>
<package pkgid="85a60b49626dc7ff73ad16e044b8c284aae9ad0af13c738ab9b240d64423a01c" name="kmod" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.1"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-7" date="1466856000">- Backported some needed fixes.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-9" date="1472817600">- Must be bumped to 20-9 due to changes and version bumps in the
  7.2-z stream.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-10" date="1480334400">- weak-modules: deprecate --delete-modules switch.
- weak-modules: implement some pathes configuration from cmdline.
- weak-modules: redesign to reuse depmod -aeE functionality
  (with some preparation changes).
  This is an updated version of the script which doesn't support
  multiple installation of the same out-of-tree module (stored in the
  'extra' subdirectory). But it more correctly checks dependencies
  between the modules.
  Resolves: rhbz#1367942</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
</package>
<package pkgid="cc27e3832524cb550d74def5227a2b023b59dc9d9c457854c1666d6f0f65e149" name="kmod" arch="i686">
  <version epoch="0" ver="20" rel="15.el7_4.2"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-9" date="1472817600">- Must be bumped to 20-9 due to changes and version bumps in the
  7.2-z stream.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-10" date="1480334400">- weak-modules: deprecate --delete-modules switch.
- weak-modules: implement some pathes configuration from cmdline.
- weak-modules: redesign to reuse depmod -aeE functionality
  (with some preparation changes).
  This is an updated version of the script which doesn't support
  multiple installation of the same out-of-tree module (stored in the
  'extra' subdirectory). But it more correctly checks dependencies
  between the modules.
  Resolves: rhbz#1367942</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
</package>
<package pkgid="d0487ac99d57229f5e60e614dbb6a3c4cebbe1a8a78d9cb83b5c7bfaf0c54b05" name="kmod" arch="src">
  <version epoch="0" ver="20" rel="15.el7_4.2"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-9" date="1472817600">- Must be bumped to 20-9 due to changes and version bumps in the
  7.2-z stream.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-10" date="1480334400">- weak-modules: deprecate --delete-modules switch.
- weak-modules: implement some pathes configuration from cmdline.
- weak-modules: redesign to reuse depmod -aeE functionality
  (with some preparation changes).
  This is an updated version of the script which doesn't support
  multiple installation of the same out-of-tree module (stored in the
  'extra' subdirectory). But it more correctly checks dependencies
  between the modules.
  Resolves: rhbz#1367942</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
</package>
<package pkgid="fc3272230a3c5a0980b2ca6f28401c7fb89ed66fb93f1b49328693fc66efb035" name="kmod" arch="src">
  <version epoch="0" ver="20" rel="15.el7_4.2"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-9" date="1472817600">- Must be bumped to 20-9 due to changes and version bumps in the
  7.2-z stream.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-10" date="1480334400">- weak-modules: deprecate --delete-modules switch.
- weak-modules: implement some pathes configuration from cmdline.
- weak-modules: redesign to reuse depmod -aeE functionality
  (with some preparation changes).
  This is an updated version of the script which doesn't support
  multiple installation of the same out-of-tree module (stored in the
  'extra' subdirectory). But it more correctly checks dependencies
  between the modules.
  Resolves: rhbz#1367942</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
</package>
<package pkgid="ee884889714924417a8b022f92975e6a920dcb64f08e934307ed6213c0bb8d0a" name="kmod" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.2"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-9" date="1472817600">- Must be bumped to 20-9 due to changes and version bumps in the
  7.2-z stream.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-10" date="1480334400">- weak-modules: deprecate --delete-modules switch.
- weak-modules: implement some pathes configuration from cmdline.
- weak-modules: redesign to reuse depmod -aeE functionality
  (with some preparation changes).
  This is an updated version of the script which doesn't support
  multiple installation of the same out-of-tree module (stored in the
  'extra' subdirectory). But it more correctly checks dependencies
  between the modules.
  Resolves: rhbz#1367942</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
</package>
<package pkgid="b711cedaf402f423d9373b64027ad47b29226c968bf4634cfe02f80819be0153" name="kmod" arch="i686">
  <version epoch="0" ver="20" rel="15.el7_4.4"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
</package>
<package pkgid="c51fe5ce77f70ce60d2f105d92f59a3ebcab850d6686942d96b60ca08d5fccaa" name="kmod" arch="src">
  <version epoch="0" ver="20" rel="15.el7_4.4"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
</package>
<package pkgid="9a084ecfcf25c0387d46784bfe5a24aaf4e7dd431ee727a4c9aa0cbcdd7de2cf" name="kmod" arch="src">
  <version epoch="0" ver="20" rel="15.el7_4.4"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
</package>
<package pkgid="9b5f4aafae62e4a16a8387d6e0a8a7ab3ef3144c2fd387ef4e7f0f763adea0fd" name="kmod" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.4"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
</package>
<package pkgid="956b4bfbf487786abae6594aae252995ef45e69af004c0903ea07d8b425216d0" name="kmod" arch="i686">
  <version epoch="0" ver="20" rel="15.el7_4.6"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
</package>
<package pkgid="0f3bb597538895e9cc0a84b5a9b2dff7d7c14d6cf94d75803fd15b94474ae58a" name="kmod" arch="src">
  <version epoch="0" ver="20" rel="15.el7_4.6"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
</package>
<package pkgid="a3be929390896881a223bcce394aa848a3216ecd50eafe7fb4e326f1b2070b2b" name="kmod" arch="src">
  <version epoch="0" ver="20" rel="15.el7_4.6"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
</package>
<package pkgid="d66e9496e0e59fce0b715a626188c94fe68647a6633a79861cf599b56bd36094" name="kmod" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.6"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
</package>
<package pkgid="27cf824ebea1939c4944387441ae40d4735f77516d424534e606852390b98fc3" name="kmod" arch="i686">
  <version epoch="0" ver="20" rel="15.el7_4.7"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.7" date="1513166400">- depmod: module_is_higher_priority: fix modname length calculation.
  Resolves: rhbz#1525364.</changelog>
</package>
<package pkgid="178ec99745e5be5899bd980cb7641be14cf5a5fa2c7b652b1c81be6aa5dbac1d" name="kmod" arch="src">
  <version epoch="0" ver="20" rel="15.el7_4.7"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.7" date="1513166400">- depmod: module_is_higher_priority: fix modname length calculation.
  Resolves: rhbz#1525364.</changelog>
</package>
<package pkgid="63ad39f35c5de96805ef81c067c435bc0da3c377a067820690bd5f753570c52b" name="kmod" arch="src">
  <version epoch="0" ver="20" rel="15.el7_4.7"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.7" date="1513166400">- depmod: module_is_higher_priority: fix modname length calculation.
  Resolves: rhbz#1525364.</changelog>
</package>
<package pkgid="b6e6d11590f31b2ec8f49f1f1605f364e4faf7c4583c34253fe74b36dc5ded19" name="kmod" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.7"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.7" date="1513166400">- depmod: module_is_higher_priority: fix modname length calculation.
  Resolves: rhbz#1525364.</changelog>
</package>
<package pkgid="5e9e6ac8de6ca8f70c46a7adeccc3fe3e308759d41db825d20307a4cc1dffd5c" name="kmod-debuginfo" arch="i686">
  <version epoch="0" ver="20" rel="15.el7_4.1"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-7" date="1466856000">- Backported some needed fixes.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-9" date="1472817600">- Must be bumped to 20-9 due to changes and version bumps in the
  7.2-z stream.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-10" date="1480334400">- weak-modules: deprecate --delete-modules switch.
- weak-modules: implement some pathes configuration from cmdline.
- weak-modules: redesign to reuse depmod -aeE functionality
  (with some preparation changes).
  This is an updated version of the script which doesn't support
  multiple installation of the same out-of-tree module (stored in the
  'extra' subdirectory). But it more correctly checks dependencies
  between the modules.
  Resolves: rhbz#1367942</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
</package>
<package pkgid="cc412cf3282700f896c8201ff76acfbc273fa403a297fc7adc39c5aaff5a8d9c" name="kmod-debuginfo" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.1"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-7" date="1466856000">- Backported some needed fixes.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-9" date="1472817600">- Must be bumped to 20-9 due to changes and version bumps in the
  7.2-z stream.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-10" date="1480334400">- weak-modules: deprecate --delete-modules switch.
- weak-modules: implement some pathes configuration from cmdline.
- weak-modules: redesign to reuse depmod -aeE functionality
  (with some preparation changes).
  This is an updated version of the script which doesn't support
  multiple installation of the same out-of-tree module (stored in the
  'extra' subdirectory). But it more correctly checks dependencies
  between the modules.
  Resolves: rhbz#1367942</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
</package>
<package pkgid="dddff6c9cbfc68f41679e30d424a5857dcbb34ef3debdc58ae5494ef61273b99" name="kmod-debuginfo" arch="i686">
  <version epoch="0" ver="20" rel="15.el7_4.2"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-9" date="1472817600">- Must be bumped to 20-9 due to changes and version bumps in the
  7.2-z stream.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-10" date="1480334400">- weak-modules: deprecate --delete-modules switch.
- weak-modules: implement some pathes configuration from cmdline.
- weak-modules: redesign to reuse depmod -aeE functionality
  (with some preparation changes).
  This is an updated version of the script which doesn't support
  multiple installation of the same out-of-tree module (stored in the
  'extra' subdirectory). But it more correctly checks dependencies
  between the modules.
  Resolves: rhbz#1367942</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
</package>
<package pkgid="bbab3ad28a81c87362a51afc7b45c2aab7023f022e19ea36607f64238392426a" name="kmod-debuginfo" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.2"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-9" date="1472817600">- Must be bumped to 20-9 due to changes and version bumps in the
  7.2-z stream.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-10" date="1480334400">- weak-modules: deprecate --delete-modules switch.
- weak-modules: implement some pathes configuration from cmdline.
- weak-modules: redesign to reuse depmod -aeE functionality
  (with some preparation changes).
  This is an updated version of the script which doesn't support
  multiple installation of the same out-of-tree module (stored in the
  'extra' subdirectory). But it more correctly checks dependencies
  between the modules.
  Resolves: rhbz#1367942</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
</package>
<package pkgid="790cca88388950c07a07f7a002c60970e8d183838793e44af189168f6ed5ee09" name="kmod-debuginfo" arch="i686">
  <version epoch="0" ver="20" rel="15.el7_4.4"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
</package>
<package pkgid="cb26ea6ebf7b611e5eabd951a1244bec6749c2a009feba02a4ee598d43122d92" name="kmod-debuginfo" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.4"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
</package>
<package pkgid="182b8bf57ddb0d4b508daa22f2507fd7d359fea85baabb8fa9588efbd533fe24" name="kmod-debuginfo" arch="i686">
  <version epoch="0" ver="20" rel="15.el7_4.6"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
</package>
<package pkgid="d8b42fbcb2aaa37b58ba2c6ccca6bc020a07c5aed509901cbbcfce77b978801e" name="kmod-debuginfo" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.6"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
</package>
<package pkgid="4aa7b055c014ab5bbbe94e14de81765c05cb65626a2764d61da7f7603c382ed1" name="kmod-debuginfo" arch="i686">
  <version epoch="0" ver="20" rel="15.el7_4.7"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.7" date="1513166400">- depmod: module_is_higher_priority: fix modname length calculation.
  Resolves: rhbz#1525364.</changelog>
</package>
<package pkgid="1ad24a014b2480aa70973eb2798dfcb0a2bf1a8ac8cadae09952f30c0793450a" name="kmod-debuginfo" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.7"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.7" date="1513166400">- depmod: module_is_higher_priority: fix modname length calculation.
  Resolves: rhbz#1525364.</changelog>
</package>
<package pkgid="60c2cd16b4e19a1d77b6e866f56993400bb8ad4738a88c8bbd02119ad95a6592" name="kmod-devel" arch="i686">
  <version epoch="0" ver="20" rel="15.el7_4.1"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-7" date="1466856000">- Backported some needed fixes.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-9" date="1472817600">- Must be bumped to 20-9 due to changes and version bumps in the
  7.2-z stream.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-10" date="1480334400">- weak-modules: deprecate --delete-modules switch.
- weak-modules: implement some pathes configuration from cmdline.
- weak-modules: redesign to reuse depmod -aeE functionality
  (with some preparation changes).
  This is an updated version of the script which doesn't support
  multiple installation of the same out-of-tree module (stored in the
  'extra' subdirectory). But it more correctly checks dependencies
  between the modules.
  Resolves: rhbz#1367942</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
</package>
<package pkgid="f5038eb9ecddfdc80b5b2fefe351a315538592bef60e87b243a5a7a4180c28f1" name="kmod-devel" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.1"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-7" date="1466856000">- Backported some needed fixes.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-9" date="1472817600">- Must be bumped to 20-9 due to changes and version bumps in the
  7.2-z stream.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-10" date="1480334400">- weak-modules: deprecate --delete-modules switch.
- weak-modules: implement some pathes configuration from cmdline.
- weak-modules: redesign to reuse depmod -aeE functionality
  (with some preparation changes).
  This is an updated version of the script which doesn't support
  multiple installation of the same out-of-tree module (stored in the
  'extra' subdirectory). But it more correctly checks dependencies
  between the modules.
  Resolves: rhbz#1367942</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
</package>
<package pkgid="bfc16ee96d8be7b2f32b83b33340442ddc7cf87c37ab3daabb3dc5546ce78c3c" name="kmod-devel" arch="i686">
  <version epoch="0" ver="20" rel="15.el7_4.2"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-9" date="1472817600">- Must be bumped to 20-9 due to changes and version bumps in the
  7.2-z stream.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-10" date="1480334400">- weak-modules: deprecate --delete-modules switch.
- weak-modules: implement some pathes configuration from cmdline.
- weak-modules: redesign to reuse depmod -aeE functionality
  (with some preparation changes).
  This is an updated version of the script which doesn't support
  multiple installation of the same out-of-tree module (stored in the
  'extra' subdirectory). But it more correctly checks dependencies
  between the modules.
  Resolves: rhbz#1367942</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
</package>
<package pkgid="f71a1a79882d31ab86e8522a6bd863a7ff8c03cc660148fb25dc8d06b285f97e" name="kmod-devel" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.2"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-9" date="1472817600">- Must be bumped to 20-9 due to changes and version bumps in the
  7.2-z stream.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-10" date="1480334400">- weak-modules: deprecate --delete-modules switch.
- weak-modules: implement some pathes configuration from cmdline.
- weak-modules: redesign to reuse depmod -aeE functionality
  (with some preparation changes).
  This is an updated version of the script which doesn't support
  multiple installation of the same out-of-tree module (stored in the
  'extra' subdirectory). But it more correctly checks dependencies
  between the modules.
  Resolves: rhbz#1367942</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
</package>
<package pkgid="7c3b08646e1266b48db83c860fd9cc5a5a7dec6febfd7c9285de1dc9961ba8e1" name="kmod-devel" arch="i686">
  <version epoch="0" ver="20" rel="15.el7_4.4"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
</package>
<package pkgid="c771a88ce74e5c28f3ec064f82e00ffd315fbefb0ced896f6be4e89ea6789df3" name="kmod-devel" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.4"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
</package>
<package pkgid="9a913f287121255d1e32c44ef47c851cc26084079096b0d7aa4e809a27fa9eed" name="kmod-devel" arch="i686">
  <version epoch="0" ver="20" rel="15.el7_4.6"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
</package>
<package pkgid="f9ad9a46fcd0045677c3778b95a0d0af4dbe67efde2e6b850135e798471e511c" name="kmod-devel" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.6"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
</package>
<package pkgid="bb526b8304670540abc0ac731658a68a6f0f3487475c101d584e35a5b6683739" name="kmod-devel" arch="i686">
  <version epoch="0" ver="20" rel="15.el7_4.7"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.7" date="1513166400">- depmod: module_is_higher_priority: fix modname length calculation.
  Resolves: rhbz#1525364.</changelog>
</package>
<package pkgid="f4f3411886677cc1a8c96593251d687769cbd0b7cb5b2a675d38f615d2cd1f62" name="kmod-devel" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.7"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.7" date="1513166400">- depmod: module_is_higher_priority: fix modname length calculation.
  Resolves: rhbz#1525364.</changelog>
</package>
<package pkgid="8bd03376ec3b19abb219c17cca61cc5e8bf11a3cb142d8f90fd9d4f0aa4f38cd" name="kmod-libs" arch="i686">
  <version epoch="0" ver="20" rel="15.el7_4.1"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-7" date="1466856000">- Backported some needed fixes.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-9" date="1472817600">- Must be bumped to 20-9 due to changes and version bumps in the
  7.2-z stream.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-10" date="1480334400">- weak-modules: deprecate --delete-modules switch.
- weak-modules: implement some pathes configuration from cmdline.
- weak-modules: redesign to reuse depmod -aeE functionality
  (with some preparation changes).
  This is an updated version of the script which doesn't support
  multiple installation of the same out-of-tree module (stored in the
  'extra' subdirectory). But it more correctly checks dependencies
  between the modules.
  Resolves: rhbz#1367942</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
</package>
<package pkgid="af5f9469010ef42786cc6c5a5585ebaf14880705a534c364c7837eb23858e090" name="kmod-libs" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.1"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-7" date="1466856000">- Backported some needed fixes.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-9" date="1472817600">- Must be bumped to 20-9 due to changes and version bumps in the
  7.2-z stream.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-10" date="1480334400">- weak-modules: deprecate --delete-modules switch.
- weak-modules: implement some pathes configuration from cmdline.
- weak-modules: redesign to reuse depmod -aeE functionality
  (with some preparation changes).
  This is an updated version of the script which doesn't support
  multiple installation of the same out-of-tree module (stored in the
  'extra' subdirectory). But it more correctly checks dependencies
  between the modules.
  Resolves: rhbz#1367942</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
</package>
<package pkgid="bcebdd57471a6bac911efc3093f8c4972011513e7e36210e75cdd8140c364f27" name="kmod-libs" arch="i686">
  <version epoch="0" ver="20" rel="15.el7_4.2"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-9" date="1472817600">- Must be bumped to 20-9 due to changes and version bumps in the
  7.2-z stream.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-10" date="1480334400">- weak-modules: deprecate --delete-modules switch.
- weak-modules: implement some pathes configuration from cmdline.
- weak-modules: redesign to reuse depmod -aeE functionality
  (with some preparation changes).
  This is an updated version of the script which doesn't support
  multiple installation of the same out-of-tree module (stored in the
  'extra' subdirectory). But it more correctly checks dependencies
  between the modules.
  Resolves: rhbz#1367942</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
</package>
<package pkgid="e6a97b0ffbe5d701d4f5e003ffa610142ba6565cadffe7474308b057f16d7ba6" name="kmod-libs" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.2"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-9" date="1472817600">- Must be bumped to 20-9 due to changes and version bumps in the
  7.2-z stream.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-10" date="1480334400">- weak-modules: deprecate --delete-modules switch.
- weak-modules: implement some pathes configuration from cmdline.
- weak-modules: redesign to reuse depmod -aeE functionality
  (with some preparation changes).
  This is an updated version of the script which doesn't support
  multiple installation of the same out-of-tree module (stored in the
  'extra' subdirectory). But it more correctly checks dependencies
  between the modules.
  Resolves: rhbz#1367942</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
</package>
<package pkgid="36439fcb2915f27e6988f6198c92ea4128162804d3c8fff12b079ebd93a32b3b" name="kmod-libs" arch="i686">
  <version epoch="0" ver="20" rel="15.el7_4.4"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
</package>
<package pkgid="1ed6258d2b056be345839240d8fad5b3631da93e991987e7c91e00f7485e8f73" name="kmod-libs" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.4"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
</package>
<package pkgid="d0aba8f8f559f0a16c9036e2d375f9b638ea9279bd1deca757ac38783c0ebf91" name="kmod-libs" arch="i686">
  <version epoch="0" ver="20" rel="15.el7_4.6"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
</package>
<package pkgid="e7ddfa4bc146f01dc763b26e53bf80f2ab2c698ecc70c2d7831c40d7624b82c0" name="kmod-libs" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.6"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
</package>
<package pkgid="9f766e02978dcfad9084eb81a2ef805461e0eb22d60a2148afef990a3372e004" name="kmod-libs" arch="i686">
  <version epoch="0" ver="20" rel="15.el7_4.7"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.7" date="1513166400">- depmod: module_is_higher_priority: fix modname length calculation.
  Resolves: rhbz#1525364.</changelog>
</package>
<package pkgid="65291c32a32aa3d6fc869cc0455248b0aa77e018f86f1626f0e692a6bb229079" name="kmod-libs" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.7"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.7" date="1513166400">- depmod: module_is_higher_priority: fix modname length calculation.
  Resolves: rhbz#1525364.</changelog>
</package>
<package pkgid="2e04eee7140b0ddfa36077e3ada1eff548cfe1445e0dae05fc68a0066a5b9cb4" name="kmod-redhat-i40e" arch="src">
  <version epoch="0" ver="2.1.14_k_dup7.4" rel="2.1.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.1.14_k_dup7.4-1" date="1519732800">- 141332170ff595319ce42a2cfc2944c2cbb11b4f
- i40e module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.1.14_k_dup7.4-2" date="1519905600">- Rebuilt with -mindirect-branch=thunk-inline -mindirect-branch-register flags.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.1.14_k_dup7.4-2.1" date="1521115200">- Added modinfo flag for retpoline.
- Resolves: #bz1549986</changelog>
</package>
<package pkgid="57b2b8fef003913244d517a2a80fba0697cb4b861a796a2caef1fad6e87df05e" name="kmod-redhat-i40e" arch="x86_64">
  <version epoch="0" ver="2.1.14_k_dup7.4" rel="2.1.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.1.14_k_dup7.4-1" date="1519732800">- 141332170ff595319ce42a2cfc2944c2cbb11b4f
- i40e module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.1.14_k_dup7.4-2" date="1519905600">- Rebuilt with -mindirect-branch=thunk-inline -mindirect-branch-register flags.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.1.14_k_dup7.4-2.1" date="1521115200">- Added modinfo flag for retpoline.
- Resolves: #bz1549986</changelog>
</package>
<package pkgid="f3f3218c4dd7c1157d98bd26af5aa2af71810c7e33691130f0621ce5727fd00d" name="kmod-redhat-i40e-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.14_k_dup7.4" rel="2.1.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.1.14_k_dup7.4-1" date="1519732800">- 141332170ff595319ce42a2cfc2944c2cbb11b4f
- i40e module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.1.14_k_dup7.4-2" date="1519905600">- Rebuilt with -mindirect-branch=thunk-inline -mindirect-branch-register flags.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.1.14_k_dup7.4-2.1" date="1521115200">- Added modinfo flag for retpoline.
- Resolves: #bz1549986</changelog>
</package>
<package pkgid="0897b0a549f78305dfe201115be2dcec2fc6d11d6c953b8354ccc015ed0f255b" name="kmod-redhat-i40evf" arch="src">
  <version epoch="0" ver="3.0.1_k_dup7.4" rel="2.1.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 3.0.1_k_dup7.4-1" date="1519732800">- 141332170ff595319ce42a2cfc2944c2cbb11b4f
- i40evf module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 3.0.1_k_dup7.4-2" date="1519905600">- Rebuilt with -mindirect-branch=thunk-inline -mindirect-branch-register flags.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.1.14_k_dup7.4-2.1" date="1521115200">- Added modinfo flag for retpoline.
- Resolves: #bz1549985</changelog>
</package>
<package pkgid="001d75375b3b1784b4c07aeb9a8cedcd1c29714365e67bcfd16d158336d42f9e" name="kmod-redhat-i40evf" arch="x86_64">
  <version epoch="0" ver="3.0.1_k_dup7.4" rel="2.1.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 3.0.1_k_dup7.4-1" date="1519732800">- 141332170ff595319ce42a2cfc2944c2cbb11b4f
- i40evf module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 3.0.1_k_dup7.4-2" date="1519905600">- Rebuilt with -mindirect-branch=thunk-inline -mindirect-branch-register flags.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.1.14_k_dup7.4-2.1" date="1521115200">- Added modinfo flag for retpoline.
- Resolves: #bz1549985</changelog>
</package>
<package pkgid="23d510a51140aa9b90b576f72ee245dc82846bc08021d1c017394aee989b43eb" name="kmod-redhat-i40evf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.1_k_dup7.4" rel="2.1.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 3.0.1_k_dup7.4-1" date="1519732800">- 141332170ff595319ce42a2cfc2944c2cbb11b4f
- i40evf module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 3.0.1_k_dup7.4-2" date="1519905600">- Rebuilt with -mindirect-branch=thunk-inline -mindirect-branch-register flags.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.1.14_k_dup7.4-2.1" date="1521115200">- Added modinfo flag for retpoline.
- Resolves: #bz1549985</changelog>
</package>
<package pkgid="53edb8ac89fffade2be10aa56d72e5b99ae6797e83ff29a114454b7cf7c432bc" name="kmod-redhat-qed" arch="src">
  <version epoch="0" ver="8.10.10.21_dup7.4" rel="2.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.10.21_dup7.4-1" date="1513252800">- 0413ea41707374d85a707b850cd0b318d3d5d132
- Resolves: #bz1525991, #bz1525992
- qed module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.10.21_dup7.4-2" date="1513684800">- Do not call dracut on non-existing kernel</changelog>
</package>
<package pkgid="fc5a58512688c44c21ea2dd9a327776052a07615ea6d80653f9c9651740b3be9" name="kmod-redhat-qed" arch="x86_64">
  <version epoch="0" ver="8.10.10.21_dup7.4" rel="2.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.10.21_dup7.4-1" date="1513252800">- 0413ea41707374d85a707b850cd0b318d3d5d132
- Resolves: #bz1525991, #bz1525992
- qed module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.10.21_dup7.4-2" date="1513684800">- Do not call dracut on non-existing kernel</changelog>
</package>
<package pkgid="9e1f47712571fa8830f4a23860c4bbd506de2796c4690c2d9799b1ac3fab4b48" name="kmod-redhat-qed-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.10.10.21_dup7.4" rel="2.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.10.21_dup7.4-1" date="1513252800">- 0413ea41707374d85a707b850cd0b318d3d5d132
- Resolves: #bz1525991, #bz1525992
- qed module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.10.21_dup7.4-2" date="1513684800">- Do not call dracut on non-existing kernel</changelog>
</package>
<package pkgid="269c83741c07f39048d2ec306081990cbd46dac5f69e38e80c8e742671653673" name="kmod-redhat-qede" arch="src">
  <version epoch="0" ver="8.10.10.21_dup7.4" rel="2.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.10.21_dup7.4-1" date="1513252800">- 0413ea41707374d85a707b850cd0b318d3d5d132
- Resolves: #bz1525991, #bz1525992
- qede module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.10.21_dup7.4-2" date="1513684800">- Do not call dracut on non-existing kernel</changelog>
</package>
<package pkgid="bf19b160322e4643088361290f66be8ab3a6b3c0b48875d171e6332400e2cc5f" name="kmod-redhat-qede" arch="x86_64">
  <version epoch="0" ver="8.10.10.21_dup7.4" rel="2.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.10.21_dup7.4-1" date="1513252800">- 0413ea41707374d85a707b850cd0b318d3d5d132
- Resolves: #bz1525991, #bz1525992
- qede module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.10.21_dup7.4-2" date="1513684800">- Do not call dracut on non-existing kernel</changelog>
</package>
<package pkgid="63fed794786b683f74fa3ee2f599bdd9fca806ffce8677eb97a598dd6680b3b0" name="kmod-redhat-qede-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.10.10.21_dup7.4" rel="2.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.10.21_dup7.4-1" date="1513252800">- 0413ea41707374d85a707b850cd0b318d3d5d132
- Resolves: #bz1525991, #bz1525992
- qede module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.10.21_dup7.4-2" date="1513684800">- Do not call dracut on non-existing kernel</changelog>
</package>
<package pkgid="3bbb8f7f76b50f4ab96176348986dc073f307c3d56cb4241d11bf8421786fa6b" name="kmod-redhat-qedf" arch="src">
  <version epoch="0" ver="8.10.7.0_dup7.4" rel="2.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.7.0_dup7.4-1" date="1513252800">- 0413ea41707374d85a707b850cd0b318d3d5d132
- Resolves: #bz1525991, #bz1525992
- qedf module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.7.0_dup7.4-2" date="1513684800">- Do not call dracut on non-existing kernel</changelog>
</package>
<package pkgid="b2c377e601f075ab327c23be5cee8635432f8f57d087840c87c61217ebd3805a" name="kmod-redhat-qedf" arch="x86_64">
  <version epoch="0" ver="8.10.7.0_dup7.4" rel="2.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.7.0_dup7.4-1" date="1513252800">- 0413ea41707374d85a707b850cd0b318d3d5d132
- Resolves: #bz1525991, #bz1525992
- qedf module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.7.0_dup7.4-2" date="1513684800">- Do not call dracut on non-existing kernel</changelog>
</package>
<package pkgid="812608b421adcf9d8fc938aa1247b5441c78f46fbd3e39ca84764f0a8d25dd62" name="kmod-redhat-qedf-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.10.7.0_dup7.4" rel="2.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.7.0_dup7.4-1" date="1513252800">- 0413ea41707374d85a707b850cd0b318d3d5d132
- Resolves: #bz1525991, #bz1525992
- qedf module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.7.0_dup7.4-2" date="1513684800">- Do not call dracut on non-existing kernel</changelog>
</package>
<package pkgid="8203490cee810aef0b2d63e67640afa6fbea60194cf66c65d3b064ce777fa8f9" name="kmod-redhat-qedi" arch="src">
  <version epoch="0" ver="8.10.4.0_dup7.4" rel="3.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.4.0_dup7.4-1" date="1513252800">- 0413ea41707374d85a707b850cd0b318d3d5d132
- Resolves: #bz1525991, #bz1525992
- qedi module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.4.0_dup7.4-2" date="1513252801">- Remove ppc architectures</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.4.0_dup7.4-3" date="1513684800">- Do not call dracut on non-existing kernel</changelog>
</package>
<package pkgid="1d64d774a2c7811beb766cd52356c1b998401f06b7b5732df95b44d8726a3ae3" name="kmod-redhat-qedi" arch="x86_64">
  <version epoch="0" ver="8.10.4.0_dup7.4" rel="3.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.4.0_dup7.4-1" date="1513252800">- 0413ea41707374d85a707b850cd0b318d3d5d132
- Resolves: #bz1525991, #bz1525992
- qedi module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.4.0_dup7.4-2" date="1513252801">- Remove ppc architectures</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.4.0_dup7.4-3" date="1513684800">- Do not call dracut on non-existing kernel</changelog>
</package>
<package pkgid="8221843ba5feb9f496b88618cebd410abdb04fae1057d568f845a1d0901963e2" name="kmod-redhat-qedi-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.10.4.0_dup7.4" rel="3.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.4.0_dup7.4-1" date="1513252800">- 0413ea41707374d85a707b850cd0b318d3d5d132
- Resolves: #bz1525991, #bz1525992
- qedi module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.4.0_dup7.4-2" date="1513252801">- Remove ppc architectures</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.4.0_dup7.4-3" date="1513684800">- Do not call dracut on non-existing kernel</changelog>
</package>
<package pkgid="94da37e20843a6d738131515858cdaea68ea2557ad7a323dd23cf9fa281bc27e" name="kmod-redhat-qedr" arch="src">
  <version epoch="0" ver="8.10.10.0_dup7.4" rel="2.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.10.0_dup7.4-1" date="1513252800">- 0413ea41707374d85a707b850cd0b318d3d5d132
- Resolves: #bz1525991, #bz1525992
- qedr module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.10.0_dup7.4-2" date="1513684800">- Do not call dracut on non-existing kernel</changelog>
</package>
<package pkgid="a32b7dd1eed3d0ac68038c3b71b9b45dc843e3050ed18301abe49dae10bd683d" name="kmod-redhat-qedr" arch="x86_64">
  <version epoch="0" ver="8.10.10.0_dup7.4" rel="2.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.10.0_dup7.4-1" date="1513252800">- 0413ea41707374d85a707b850cd0b318d3d5d132
- Resolves: #bz1525991, #bz1525992
- qedr module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.10.0_dup7.4-2" date="1513684800">- Do not call dracut on non-existing kernel</changelog>
</package>
<package pkgid="a7b1f95fe262544069d008e6e22ebd75b7df648d70003610d798ac9152786a55" name="kmod-redhat-qedr-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.10.10.0_dup7.4" rel="2.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.10.0_dup7.4-1" date="1513252800">- 0413ea41707374d85a707b850cd0b318d3d5d132
- Resolves: #bz1525991, #bz1525992
- qedr module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.10.0_dup7.4-2" date="1513684800">- Do not call dracut on non-existing kernel</changelog>
</package>
<package pkgid="2d3e9d7f4b9f969f7015af034c2441a0807d3105259d2f79fcb09603149c30f6" name="kpartx" arch="i686">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="4e1aacbf80432acfb14a2dd657b1ac239832d53bacfcf8fd6f706798bdf8e628" name="kpartx" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="7c7ab2722b0eb7bb94ac2c04f8369989e1bbab3ebe05ada526f8b0b083c0df03" name="kpatch" arch="noarch">
  <version epoch="0" ver="0.4.0" rel="2.el7_4"/>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.1.8-1" date="1405425600">- update to kpatch 0.1.8</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.1.9-1" date="1406116800">- update to kpatch 0.1.9</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.1.10-1" date="1406808000">- update to kpatch 0.1.10</changelog>
  <changelog author="Seth Jennings &lt;sjenning@redhat.com&gt; 0.1.10-2" date="1410436800">- support modprobe format names (rhbz#1133045)</changelog>
  <changelog author="Seth Jennings &lt;sjenning@redhat.com&gt; 0.1.10-3" date="1410868800">- support re-enabling forced modules (rhbz#1140268)</changelog>
  <changelog author="Seth Jennings &lt;sjenning@redhat.com&gt; 0.1.10-4" date="1410868801">- fix dracut dependencies (rhbz#1170369)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.3.1-1" date="1447848000">- update to 0.3.1 (rhbz#1282508)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.3.2-1" date="1465992000">- update to 0.3.2 (rhbz#1282508)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.4.0-1" date="1489406400">- update to 0.4.0 (rhbz#1427642)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.4.0-2" date="1508328000">- fix backwards compatibility with RHEL 7.3 patches (rhbz#1497735)</changelog>
</package>
<package pkgid="084f6234d707ccd3e314bfd0f6bb75382daa2725df22dd75280d7a6183c71ecc" name="kpatch" arch="noarch">
  <version epoch="0" ver="0.4.0" rel="2.el7_4"/>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.1.8-1" date="1405425600">- update to kpatch 0.1.8</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.1.9-1" date="1406116800">- update to kpatch 0.1.9</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.1.10-1" date="1406808000">- update to kpatch 0.1.10</changelog>
  <changelog author="Seth Jennings &lt;sjenning@redhat.com&gt; 0.1.10-2" date="1410436800">- support modprobe format names (rhbz#1133045)</changelog>
  <changelog author="Seth Jennings &lt;sjenning@redhat.com&gt; 0.1.10-3" date="1410868800">- support re-enabling forced modules (rhbz#1140268)</changelog>
  <changelog author="Seth Jennings &lt;sjenning@redhat.com&gt; 0.1.10-4" date="1410868801">- fix dracut dependencies (rhbz#1170369)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.3.1-1" date="1447848000">- update to 0.3.1 (rhbz#1282508)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.3.2-1" date="1465992000">- update to 0.3.2 (rhbz#1282508)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.4.0-1" date="1489406400">- update to 0.4.0 (rhbz#1427642)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.4.0-2" date="1508328000">- fix backwards compatibility with RHEL 7.3 patches (rhbz#1497735)</changelog>
</package>
<package pkgid="639d470fd1cb8c8b75f9119b615cf157a4f53ed1b16fbdd3fa112cec9f6f8057" name="kpatch" arch="src">
  <version epoch="0" ver="0.4.0" rel="2.el7_4"/>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.1.8-1" date="1405425600">- update to kpatch 0.1.8</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.1.9-1" date="1406116800">- update to kpatch 0.1.9</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.1.10-1" date="1406808000">- update to kpatch 0.1.10</changelog>
  <changelog author="Seth Jennings &lt;sjenning@redhat.com&gt; 0.1.10-2" date="1410436800">- support modprobe format names (rhbz#1133045)</changelog>
  <changelog author="Seth Jennings &lt;sjenning@redhat.com&gt; 0.1.10-3" date="1410868800">- support re-enabling forced modules (rhbz#1140268)</changelog>
  <changelog author="Seth Jennings &lt;sjenning@redhat.com&gt; 0.1.10-4" date="1410868801">- fix dracut dependencies (rhbz#1170369)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.3.1-1" date="1447848000">- update to 0.3.1 (rhbz#1282508)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.3.2-1" date="1465992000">- update to 0.3.2 (rhbz#1282508)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.4.0-1" date="1489406400">- update to 0.4.0 (rhbz#1427642)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.4.0-2" date="1508328000">- fix backwards compatibility with RHEL 7.3 patches (rhbz#1497735)</changelog>
</package>
<package pkgid="66fa77badaa24429ade605805c02e600937a12df423be2dda2df9353efffc5ef" name="kpatch" arch="src">
  <version epoch="0" ver="0.4.0" rel="2.el7_4"/>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.1.8-1" date="1405425600">- update to kpatch 0.1.8</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.1.9-1" date="1406116800">- update to kpatch 0.1.9</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.1.10-1" date="1406808000">- update to kpatch 0.1.10</changelog>
  <changelog author="Seth Jennings &lt;sjenning@redhat.com&gt; 0.1.10-2" date="1410436800">- support modprobe format names (rhbz#1133045)</changelog>
  <changelog author="Seth Jennings &lt;sjenning@redhat.com&gt; 0.1.10-3" date="1410868800">- support re-enabling forced modules (rhbz#1140268)</changelog>
  <changelog author="Seth Jennings &lt;sjenning@redhat.com&gt; 0.1.10-4" date="1410868801">- fix dracut dependencies (rhbz#1170369)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.3.1-1" date="1447848000">- update to 0.3.1 (rhbz#1282508)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.3.2-1" date="1465992000">- update to 0.3.2 (rhbz#1282508)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.4.0-1" date="1489406400">- update to 0.4.0 (rhbz#1427642)</changelog>
  <changelog author="Josh Poimboeuf &lt;jpoimboe@redhat.com&gt; 0.4.0-2" date="1508328000">- fix backwards compatibility with RHEL 7.3 patches (rhbz#1497735)</changelog>
</package>
<package pkgid="c085ec83a4c773ff0e25abcceefa3a94ba0c43c717f1817f2f4f4f23c123f990" name="ksh" arch="i686">
  <version epoch="0" ver="20120801" rel="35.el7_4"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-26" date="1461672000">- closing a file descriptor in a command substitution caused loss of the output (#1202439)
- fix: in a login shell "( cmd &amp; )" does nothing (#1217237)
- exporting fixed with variable corrupted its data (#1192026)
- fix segfault when handling a trap (#1211540)
- combining alarm and IFS caused segfault (#1192119)
- declaration of a two dimemsional associatve array could add an extra 0 element (#1193557)
- do not inherit invalid variables during shell initializaton (#1211538)
- case in a for loop inside a subshell caused syntax error (#1241014)</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-27" date="1486728000">- bump release
  Resolves: #1391931</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-28" date="1486728001">- Fix a bug in memory allocation while listing indexed arrays with typeset
  Resolves: #1371630</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-29" date="1486728002">- Fix a crash during clean up after sourcing multiple files
  Resolves: #1321443</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-30" date="1486728003">- Fix a memory leak in subshell when PATH is set
  Resolves: #1405784</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-31" date="1486728004">- Fix a memory leak on unset of associative array
  Resolves: #1189297</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-32" date="1486728005">- Treat unset parameters as error
  Resolves: #1222025</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-33" date="1486728006">- Prevent null-test optimization in strdup
  Resolves: #1269088</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-34" date="1486728007">- Multibyte character string after $1-9 was not expanded correctly
  Resolves: #1299484</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-35" date="1516795200">- Add configuration option to enable signal bubbling for backward compatibility
  Resolves: #1484937</changelog>
</package>
<package pkgid="b863d4ee616f8f7fe6a603249f7a919fe61ec342ec4c19f6cbcee39812be0067" name="ksh" arch="src">
  <version epoch="0" ver="20120801" rel="35.el7_4"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-26" date="1461672000">- closing a file descriptor in a command substitution caused loss of the output (#1202439)
- fix: in a login shell "( cmd &amp; )" does nothing (#1217237)
- exporting fixed with variable corrupted its data (#1192026)
- fix segfault when handling a trap (#1211540)
- combining alarm and IFS caused segfault (#1192119)
- declaration of a two dimemsional associatve array could add an extra 0 element (#1193557)
- do not inherit invalid variables during shell initializaton (#1211538)
- case in a for loop inside a subshell caused syntax error (#1241014)</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-27" date="1486728000">- bump release
  Resolves: #1391931</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-28" date="1486728001">- Fix a bug in memory allocation while listing indexed arrays with typeset
  Resolves: #1371630</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-29" date="1486728002">- Fix a crash during clean up after sourcing multiple files
  Resolves: #1321443</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-30" date="1486728003">- Fix a memory leak in subshell when PATH is set
  Resolves: #1405784</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-31" date="1486728004">- Fix a memory leak on unset of associative array
  Resolves: #1189297</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-32" date="1486728005">- Treat unset parameters as error
  Resolves: #1222025</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-33" date="1486728006">- Prevent null-test optimization in strdup
  Resolves: #1269088</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-34" date="1486728007">- Multibyte character string after $1-9 was not expanded correctly
  Resolves: #1299484</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-35" date="1516795200">- Add configuration option to enable signal bubbling for backward compatibility
  Resolves: #1484937</changelog>
</package>
<package pkgid="31df207e19da59d9b094b83df0e01d2b2834581d5ce43361900b18fd26a887a2" name="ksh" arch="src">
  <version epoch="0" ver="20120801" rel="35.el7_4"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-26" date="1461672000">- closing a file descriptor in a command substitution caused loss of the output (#1202439)
- fix: in a login shell "( cmd &amp; )" does nothing (#1217237)
- exporting fixed with variable corrupted its data (#1192026)
- fix segfault when handling a trap (#1211540)
- combining alarm and IFS caused segfault (#1192119)
- declaration of a two dimemsional associatve array could add an extra 0 element (#1193557)
- do not inherit invalid variables during shell initializaton (#1211538)
- case in a for loop inside a subshell caused syntax error (#1241014)</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-27" date="1486728000">- bump release
  Resolves: #1391931</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-28" date="1486728001">- Fix a bug in memory allocation while listing indexed arrays with typeset
  Resolves: #1371630</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-29" date="1486728002">- Fix a crash during clean up after sourcing multiple files
  Resolves: #1321443</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-30" date="1486728003">- Fix a memory leak in subshell when PATH is set
  Resolves: #1405784</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-31" date="1486728004">- Fix a memory leak on unset of associative array
  Resolves: #1189297</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-32" date="1486728005">- Treat unset parameters as error
  Resolves: #1222025</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-33" date="1486728006">- Prevent null-test optimization in strdup
  Resolves: #1269088</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-34" date="1486728007">- Multibyte character string after $1-9 was not expanded correctly
  Resolves: #1299484</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-35" date="1516795200">- Add configuration option to enable signal bubbling for backward compatibility
  Resolves: #1484937</changelog>
</package>
<package pkgid="86da4e7eb3912f129e9811efe76d8f33304f221955d5c94a337a336f276613a6" name="ksh" arch="x86_64">
  <version epoch="0" ver="20120801" rel="35.el7_4"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-26" date="1461672000">- closing a file descriptor in a command substitution caused loss of the output (#1202439)
- fix: in a login shell "( cmd &amp; )" does nothing (#1217237)
- exporting fixed with variable corrupted its data (#1192026)
- fix segfault when handling a trap (#1211540)
- combining alarm and IFS caused segfault (#1192119)
- declaration of a two dimemsional associatve array could add an extra 0 element (#1193557)
- do not inherit invalid variables during shell initializaton (#1211538)
- case in a for loop inside a subshell caused syntax error (#1241014)</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-27" date="1486728000">- bump release
  Resolves: #1391931</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-28" date="1486728001">- Fix a bug in memory allocation while listing indexed arrays with typeset
  Resolves: #1371630</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-29" date="1486728002">- Fix a crash during clean up after sourcing multiple files
  Resolves: #1321443</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-30" date="1486728003">- Fix a memory leak in subshell when PATH is set
  Resolves: #1405784</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-31" date="1486728004">- Fix a memory leak on unset of associative array
  Resolves: #1189297</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-32" date="1486728005">- Treat unset parameters as error
  Resolves: #1222025</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-33" date="1486728006">- Prevent null-test optimization in strdup
  Resolves: #1269088</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-34" date="1486728007">- Multibyte character string after $1-9 was not expanded correctly
  Resolves: #1299484</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-35" date="1516795200">- Add configuration option to enable signal bubbling for backward compatibility
  Resolves: #1484937</changelog>
</package>
<package pkgid="5983ddd36a5330e2a2f1666e014d7e94e6ee6a5a761478493a91315413cf7ea1" name="ksh-debuginfo" arch="i686">
  <version epoch="0" ver="20120801" rel="35.el7_4"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-26" date="1461672000">- closing a file descriptor in a command substitution caused loss of the output (#1202439)
- fix: in a login shell "( cmd &amp; )" does nothing (#1217237)
- exporting fixed with variable corrupted its data (#1192026)
- fix segfault when handling a trap (#1211540)
- combining alarm and IFS caused segfault (#1192119)
- declaration of a two dimemsional associatve array could add an extra 0 element (#1193557)
- do not inherit invalid variables during shell initializaton (#1211538)
- case in a for loop inside a subshell caused syntax error (#1241014)</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-27" date="1486728000">- bump release
  Resolves: #1391931</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-28" date="1486728001">- Fix a bug in memory allocation while listing indexed arrays with typeset
  Resolves: #1371630</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-29" date="1486728002">- Fix a crash during clean up after sourcing multiple files
  Resolves: #1321443</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-30" date="1486728003">- Fix a memory leak in subshell when PATH is set
  Resolves: #1405784</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-31" date="1486728004">- Fix a memory leak on unset of associative array
  Resolves: #1189297</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-32" date="1486728005">- Treat unset parameters as error
  Resolves: #1222025</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-33" date="1486728006">- Prevent null-test optimization in strdup
  Resolves: #1269088</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-34" date="1486728007">- Multibyte character string after $1-9 was not expanded correctly
  Resolves: #1299484</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-35" date="1516795200">- Add configuration option to enable signal bubbling for backward compatibility
  Resolves: #1484937</changelog>
</package>
<package pkgid="9f4df2735a88f5da6c8903068d323623c5edfe17b326595cdc9d11847de61385" name="ksh-debuginfo" arch="x86_64">
  <version epoch="0" ver="20120801" rel="35.el7_4"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-26" date="1461672000">- closing a file descriptor in a command substitution caused loss of the output (#1202439)
- fix: in a login shell "( cmd &amp; )" does nothing (#1217237)
- exporting fixed with variable corrupted its data (#1192026)
- fix segfault when handling a trap (#1211540)
- combining alarm and IFS caused segfault (#1192119)
- declaration of a two dimemsional associatve array could add an extra 0 element (#1193557)
- do not inherit invalid variables during shell initializaton (#1211538)
- case in a for loop inside a subshell caused syntax error (#1241014)</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-27" date="1486728000">- bump release
  Resolves: #1391931</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-28" date="1486728001">- Fix a bug in memory allocation while listing indexed arrays with typeset
  Resolves: #1371630</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-29" date="1486728002">- Fix a crash during clean up after sourcing multiple files
  Resolves: #1321443</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-30" date="1486728003">- Fix a memory leak in subshell when PATH is set
  Resolves: #1405784</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-31" date="1486728004">- Fix a memory leak on unset of associative array
  Resolves: #1189297</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-32" date="1486728005">- Treat unset parameters as error
  Resolves: #1222025</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-33" date="1486728006">- Prevent null-test optimization in strdup
  Resolves: #1269088</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-34" date="1486728007">- Multibyte character string after $1-9 was not expanded correctly
  Resolves: #1299484</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-35" date="1516795200">- Add configuration option to enable signal bubbling for backward compatibility
  Resolves: #1484937</changelog>
</package>
<package pkgid="2e917ca2f6535b6b2f42dc1af939a501b29f0978682ea6e5cb66f882621ef300" name="libasan" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="d14977ea86a8f9910f3aaba086ee2eab074564369b22ca966dbf20e7e8d5d5ae" name="libasan" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="0bcaa53394160e4bf2fd77ae67bd64712c1d7e4ea885557827dc9776686109a9" name="libasan" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="aba25117226d7bad8595cb47b2d8bcb7511f43208a091a6cdbbacb98adbd9f45" name="libasan" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="e349c387a47f24732f0954501e2a082303c9b8809c6ce4fb4bb89c37b66b1964" name="libasan-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="f87a9428ba9623114ce7dd17fee42e87360ae116a335fa2bc8ccc369643b976b" name="libasan-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="d36e16181e9a1225d8a8edf7bc87fa1902cb9e6230adaad0a4cce6d882c78c74" name="libasan-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="2787465321fa52dc5b12f1130635bb9b82a2dee5d10e6bb3b854341892645dd7" name="libasan-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="dd4a7c8bc274479c68499d5d103e6fed68f208fb8e12074b14dfd09fb82a26d3" name="libatomic" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="07814f0eff9878b3c057b17199bef91a5d819b66b9c726bf0db9a4d22b3d9ea4" name="libatomic" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="228d9e97f62ff9405a87d4b9008ba470937cff531c09faacec8a4a5ebd8abf3b" name="libatomic" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="8c0caf01cfa27b831bce42ab3fb1bfc1d5fb6cd9543d4180871a974154e54778" name="libatomic" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="fa9dbfb62821f36bef2cd3eac51ed8ee0799e27586c33ae1aa6cfb8143c8d3e9" name="libatomic-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="2e51a94c72f1c394531b6b7c51892b62ef9dcb88e7f91c6d642a73d34803e46b" name="libatomic-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="0bea31a3fc3ccf0f778c2e5264f124f4913e440c852fa440da2c3aaa5128b58a" name="libatomic-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="9fcad6bdeeeea7ff4877d4c5bf6bfc5c3ba835d784c9321c70e84ceb078fcb9e" name="libatomic-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="cd948cf58af71e8b8abd3002c38ea73ec5789c95c82df2fce712a7b157ca1725" name="libblkid" arch="i686">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="0f243254b420098095f86d567386cf61bfe9cc20b7c0af7eb8f9f7fe09b17f27" name="libblkid" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="175e40c4391a088cccf222f2611b80d9010df1aa89d4bbe13d846594137404ff" name="libblkid-devel" arch="i686">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="b36135efed2d4906be52731e697de848960faca0aca4afbc4fb686d048c410b8" name="libblkid-devel" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="8209952a757b7907ed3a19d89d693c95794149024a9dacee4393be4b9edffa23" name="libcurl" arch="i686">
  <version epoch="0" ver="7.29.0" rel="42.el7_4.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-34" date="1471435200">- acknowledge the --no-sessionid/CURLOPT_SSL_SESSIONID_CACHE option
  (required by the fix for CVE-2016-5419)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-35" date="1472212800">- fix incorrect use of a previously loaded certificate from file
  (related to CVE-2016-5420)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-36" date="1474372800">- reject negative string lengths in curl_easy_[un]escape() (CVE-2016-7167)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-37" date="1475755200">- fix tight loop in non-blocking TLS handhsake over proxy (#1388162)
- handle cookies with numerical IPv6 address (#1341503)
- make libcurl recognize chacha20-poly1305 and SHA384 cipher-suites (#1374740)
- curl -E: allow to escape ':' in cert nickname (#1376062)
- run automake in %prep to avoid patching Makefile.in files from now on</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-38" date="1486641600">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-39" date="1488369600">- work around race condition in PK11_FindSlotByName() in NSS (#1404815)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-40" date="1490616000">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-41" date="1490788800">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-42" date="1490788801">- fix use of uninitialized variable detected by Covscan</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-42.el7_4.1" date="1508760000">- fix buffer overflow while processing IMAP FETCH response (CVE-2017-1000257)</changelog>
</package>
<package pkgid="bd35dffebe6b80c099f0cdffe475b4fb870813c558c0a0df173a2f2b9ec82d06" name="libcurl" arch="x86_64">
  <version epoch="0" ver="7.29.0" rel="42.el7_4.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-34" date="1471435200">- acknowledge the --no-sessionid/CURLOPT_SSL_SESSIONID_CACHE option
  (required by the fix for CVE-2016-5419)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-35" date="1472212800">- fix incorrect use of a previously loaded certificate from file
  (related to CVE-2016-5420)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-36" date="1474372800">- reject negative string lengths in curl_easy_[un]escape() (CVE-2016-7167)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-37" date="1475755200">- fix tight loop in non-blocking TLS handhsake over proxy (#1388162)
- handle cookies with numerical IPv6 address (#1341503)
- make libcurl recognize chacha20-poly1305 and SHA384 cipher-suites (#1374740)
- curl -E: allow to escape ':' in cert nickname (#1376062)
- run automake in %prep to avoid patching Makefile.in files from now on</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-38" date="1486641600">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-39" date="1488369600">- work around race condition in PK11_FindSlotByName() in NSS (#1404815)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-40" date="1490616000">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-41" date="1490788800">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-42" date="1490788801">- fix use of uninitialized variable detected by Covscan</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-42.el7_4.1" date="1508760000">- fix buffer overflow while processing IMAP FETCH response (CVE-2017-1000257)</changelog>
</package>
<package pkgid="f1d96e76f4683f1fc43735421d0aa8ea8be1a9e948d9fbc3f79bd02e566b6ed3" name="libcurl-devel" arch="i686">
  <version epoch="0" ver="7.29.0" rel="42.el7_4.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-34" date="1471435200">- acknowledge the --no-sessionid/CURLOPT_SSL_SESSIONID_CACHE option
  (required by the fix for CVE-2016-5419)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-35" date="1472212800">- fix incorrect use of a previously loaded certificate from file
  (related to CVE-2016-5420)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-36" date="1474372800">- reject negative string lengths in curl_easy_[un]escape() (CVE-2016-7167)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-37" date="1475755200">- fix tight loop in non-blocking TLS handhsake over proxy (#1388162)
- handle cookies with numerical IPv6 address (#1341503)
- make libcurl recognize chacha20-poly1305 and SHA384 cipher-suites (#1374740)
- curl -E: allow to escape ':' in cert nickname (#1376062)
- run automake in %prep to avoid patching Makefile.in files from now on</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-38" date="1486641600">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-39" date="1488369600">- work around race condition in PK11_FindSlotByName() in NSS (#1404815)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-40" date="1490616000">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-41" date="1490788800">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-42" date="1490788801">- fix use of uninitialized variable detected by Covscan</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-42.el7_4.1" date="1508760000">- fix buffer overflow while processing IMAP FETCH response (CVE-2017-1000257)</changelog>
</package>
<package pkgid="6ad808fa885f7357b2be9d88c1c29b5b1efcc8118c24faace767594b86cdc8ba" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.29.0" rel="42.el7_4.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-34" date="1471435200">- acknowledge the --no-sessionid/CURLOPT_SSL_SESSIONID_CACHE option
  (required by the fix for CVE-2016-5419)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-35" date="1472212800">- fix incorrect use of a previously loaded certificate from file
  (related to CVE-2016-5420)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-36" date="1474372800">- reject negative string lengths in curl_easy_[un]escape() (CVE-2016-7167)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-37" date="1475755200">- fix tight loop in non-blocking TLS handhsake over proxy (#1388162)
- handle cookies with numerical IPv6 address (#1341503)
- make libcurl recognize chacha20-poly1305 and SHA384 cipher-suites (#1374740)
- curl -E: allow to escape ':' in cert nickname (#1376062)
- run automake in %prep to avoid patching Makefile.in files from now on</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-38" date="1486641600">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-39" date="1488369600">- work around race condition in PK11_FindSlotByName() in NSS (#1404815)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-40" date="1490616000">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-41" date="1490788800">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-42" date="1490788801">- fix use of uninitialized variable detected by Covscan</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-42.el7_4.1" date="1508760000">- fix buffer overflow while processing IMAP FETCH response (CVE-2017-1000257)</changelog>
</package>
<package pkgid="3b518e28112d695abb35314b38895282159e9d0c2593587807bfd24f605a511b" name="libdb" arch="i686">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="08aa208777c16b6bd494a1b89450268ec1d637e56d2b1661cdc25fd06d0572af" name="libdb" arch="src">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="3ccbd8be6d4d18e6f849dbcac4e017fa9f552bc312548cf5790760eebd697e67" name="libdb" arch="src">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="d650a66c09c646bb51819ca1e9311c8a586941c4177d621c7cf8240da4a2544a" name="libdb" arch="x86_64">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="1eeb21075fe355eecda64412cc2d4a882ebe391fe0459622fbdddb9d674d5e2e" name="libdb-cxx" arch="i686">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="6f36fcc450ed175d05f7025fa22ebfe215788df069c704995078bcc0ce54bc40" name="libdb-cxx" arch="x86_64">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="0d81db4ba01568ee5765501c71af4a601e145e702f390150839e55242a354813" name="libdb-cxx-devel" arch="i686">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="77ce271d30e6274cf7b1d9cd5de7dc9a5b0a2d87783bd15cc7eecb4ee628052b" name="libdb-cxx-devel" arch="x86_64">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="02c5a7c926d78c6712724cd4243da93103dda99e335a66d492dae9682a6bc590" name="libdb-debuginfo" arch="i686">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="0a91d98d8f0d6ee68bf330eef35b52aeda976a2750191266a8eddf7dae9fec5f" name="libdb-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="c71a508a373b9a0b064b66f25cb9bbe89bdbf471d273c6bd3e4a0058deed352f" name="libdb-devel" arch="i686">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="174b5e0228b59c62b02d24a85f2044610404ea4332fb2edadc23565a79257dbd" name="libdb-devel" arch="x86_64">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="b2756c127128054f21de2a8bdad4bf28f307ffc63ad840485ed646bd5930edc1" name="libdb-devel-doc" arch="noarch">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="0df3ad05e38fbddb2ee3b86534c9a47af8c7a8fec2859f3407bbb1795fef907e" name="libdb-devel-doc" arch="noarch">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="1bf99da78903d0df874bf548945e7b8974bc75e9d98cc29140fd70eeec39714c" name="libdb-devel-static" arch="i686">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="f4d1f83813b68854d9730203f54ead1b157448fdbae83ecc6d61284d20662554" name="libdb-devel-static" arch="x86_64">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="c16a1fe7f3196f4c300cb51897ba4c0b526d004bf2d731be1c3c5eab2e988eab" name="libdb-java" arch="i686">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="d861c47a1c3d1754785dfd23206313732c39958a96e6c19dc9228c36f7c3b1ce" name="libdb-java" arch="x86_64">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="5eb3af465da3f7440b542be552f2011fa694d306cdeb17edac0336f1eb938935" name="libdb-java-devel" arch="i686">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="d8f75df5203b51443b6dcd98944e0d689d17e2766771624444eebaf519d1cc16" name="libdb-java-devel" arch="x86_64">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="31d26f21262114ac39d57ad41adaf62f268df75801d2b509e900ec4174193dfb" name="libdb-sql" arch="i686">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="45b3be06d054db054833616e05c1162d63a84e58cfd972bf01f57c9d5ae861bb" name="libdb-sql" arch="x86_64">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="1120b57c25b4637763dec53180553d379e808d5f5bbdce2fdeef8bda72a1ee95" name="libdb-sql-devel" arch="i686">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="92cb01ef9b0b39bbf63b16bb11a5fdecc76284f6a90bc2d751cd4bf3946fb137" name="libdb-sql-devel" arch="x86_64">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="09e21ea6547b25aa651aceed191aa6422ec2e7f22dc2fd5550d50a0f4fadd6f0" name="libdb-tcl" arch="i686">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="65b32050b89dc432a11bcaac06639d1bb38922ee1d641d6a44ff590bb4dadb88" name="libdb-tcl" arch="x86_64">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="2de0da680a216470f351e2fbb3aed8bef19d4f6fa483de20a4e933002c47e4ae" name="libdb-tcl-devel" arch="i686">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="3fe690c60230cb6a1dd395823fc193b32c31b876b34c56b5a5c4a0d908a71477" name="libdb-tcl-devel" arch="x86_64">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="30470b20ef55984f64e082b2b660b710554be7d19387533e2848e0d9ac99418c" name="libdb-utils" arch="i686">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="ad2653002352fbd0563d9aeda3c157e15f64843373909d21cd0779831c8380ab" name="libdb-utils" arch="x86_64">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="2f8c1fe080717cddfcc2c5740c566062eecd500664d646393b3e36d85a4c90e3" name="libdmmp" arch="i686">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="d55d19ec03aeb7b8aa37e8270e4b94cfbeea51c6e13e2890eeca50614d0b26f2" name="libdmmp" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="49b85bb270fd7a840990cac98e6a0ab491a3caf95e41e57c4acc0d303794347a" name="libdmmp-devel" arch="i686">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="fe9f6f2bb597e0dd9c48867d7a6a7cc7d0e1eea9e1b21aef7ed3ccbb832a1375" name="libdmmp-devel" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="fd87562f811d79b861df53e55cc3d97657f13d491e76bac882273ea1150f5d9e" name="libgcab1" arch="i686">
  <version epoch="0" ver="0.7" rel="4.el7_4"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-1" date="1426593600">- Update to upstream release v0.6</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6-2" date="1427112000">- Pull in the base library package when installing -devel</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6-3" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-4" date="1438257600">- Fix wrong file modification date when creating cab.</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 0.6-5" date="1448971200">- Bump NVR and rebuild due to a mistakenly deleted build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6-6" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.7-1" date="1457524800">- 0.7 release update.</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-2" date="1488456000">- Fix some bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-3" date="1488801600">- Fix some more bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-4" date="1518609600">- Fixes the security issue known as CVE-2018-5345
- Resolves: #1533174</changelog>
</package>
<package pkgid="6cc7273bb037ce644cca335bd4d8c3da8d54d074fe28e4a0a4880ce7ce5593ce" name="libgcab1" arch="x86_64">
  <version epoch="0" ver="0.7" rel="4.el7_4"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-1" date="1426593600">- Update to upstream release v0.6</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6-2" date="1427112000">- Pull in the base library package when installing -devel</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6-3" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-4" date="1438257600">- Fix wrong file modification date when creating cab.</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 0.6-5" date="1448971200">- Bump NVR and rebuild due to a mistakenly deleted build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6-6" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.7-1" date="1457524800">- 0.7 release update.</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-2" date="1488456000">- Fix some bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-3" date="1488801600">- Fix some more bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-4" date="1518609600">- Fixes the security issue known as CVE-2018-5345
- Resolves: #1533174</changelog>
</package>
<package pkgid="b5020bd323a7443c801aa2640f6c221ccf24542f2abc76ce5ad0edd16c005f15" name="libgcab1-devel" arch="i686">
  <version epoch="0" ver="0.7" rel="4.el7_4"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-1" date="1426593600">- Update to upstream release v0.6</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6-2" date="1427112000">- Pull in the base library package when installing -devel</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6-3" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-4" date="1438257600">- Fix wrong file modification date when creating cab.</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 0.6-5" date="1448971200">- Bump NVR and rebuild due to a mistakenly deleted build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6-6" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.7-1" date="1457524800">- 0.7 release update.</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-2" date="1488456000">- Fix some bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-3" date="1488801600">- Fix some more bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-4" date="1518609600">- Fixes the security issue known as CVE-2018-5345
- Resolves: #1533174</changelog>
</package>
<package pkgid="2e11799bef3ce21bdfb5deca67cc9ab1e11079906af6f207138a5650f5460f29" name="libgcab1-devel" arch="x86_64">
  <version epoch="0" ver="0.7" rel="4.el7_4"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-1" date="1426593600">- Update to upstream release v0.6</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6-2" date="1427112000">- Pull in the base library package when installing -devel</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6-3" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-4" date="1438257600">- Fix wrong file modification date when creating cab.</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 0.6-5" date="1448971200">- Bump NVR and rebuild due to a mistakenly deleted build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6-6" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.7-1" date="1457524800">- 0.7 release update.</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-2" date="1488456000">- Fix some bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-3" date="1488801600">- Fix some more bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-4" date="1518609600">- Fixes the security issue known as CVE-2018-5345
- Resolves: #1533174</changelog>
</package>
<package pkgid="4ad77acbca70ff2499addb83b44f3ba31e9f4b2998f4617f4fd767ddb9508ad0" name="libgcc" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="ef9d4fcb124b92df03c8c668284465a86d18aaef8b3aa6e61f053450aad38201" name="libgcc" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="3de1c1eeebce8760409cb3231189d34e28bcf6900a0b7c4ae2f3d1bc620d434e" name="libgcc" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="9318e5479ebd3b9c97f46145ee944c5f971c43f35f6fbc46ef974eb5f09510af" name="libgcc" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="279d34b71a705923d643c8a846953f5e659bf865baa93dd0d1fcbe1f1256a502" name="libgfortran" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="3666835a5aa2f7382a0bc5f46a5ddfc06141c674361846e2413dc66321317fb4" name="libgfortran" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="8f820ed02262d93b571b7fa4ebd5869d8dd5f0ce61e1d84a760ecb32e1f7a295" name="libgfortran" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="ea02f1b2905dd572e55fbf143e4ac549946e234d5b2b17d673a6c363be215f29" name="libgfortran" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="b6cd57abd6f2340f3549266fb41306cb95b83d6faac04ece95994d22a0bda631" name="libgfortran-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="6d019e1ea4f1c3c26b9a844a5f0fffda27184fca38c371f5fe0a2d15b8c62e7e" name="libgfortran-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="065e2c850fff7ca7b60342a2bed02f0af1c0b6787dcd074cb90750e451181f88" name="libgfortran-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="0f01be76b5b01402d254811a9210c6eb04cf697545b490e4993c838210fe5f8c" name="libgfortran-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="96ce8273aabb5cc298ac65946e7a6a58229d40936752187a2a1a5106c191d904" name="libgnat" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="b40cfa5e35f02ef0e34d0238c1418999e0c883bb2f74ee1b0aab3ca6eacefd8d" name="libgnat" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="e983bf880ac3db03550b2e4acd8579cf8180c961dc7899ead9321e7554670572" name="libgnat" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="c931fdf5bacddba9aeecf5b02be060ff90e05e8ab603a43b92b0fea2849cd0fb" name="libgnat" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="21ce965731773d5921937be66d399d18998fe3e3b1647a8df73baebae312cb3a" name="libgnat-devel" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="31b9a9ee0110e4de1eaace54d37fd5e10de138e5c2e0f16ae5c57f55b4a2324f" name="libgnat-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="3cac464e56021522bfa5f2b894e0a5c09d2b8fdb2e6749ebd4a5001003315a58" name="libgnat-devel" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="8bfb49da9a74f7d69ba37be9df0c73a90f692b2f1d53f80070ce35963c526cd1" name="libgnat-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="b3ec08dcc29469aafe68444f12aa2aecc58e6a79ea09385519161e2eef245b9e" name="libgnat-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="1a0595e6a7df7486cc8fdb3d27b4d07059737c9f3c39bbf67ebb1f3a0464f165" name="libgnat-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="d21356cfa90cfd012d7775ac784a148dacee2fc6a543d446c9e96ed355e13466" name="libgnat-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="76ae6c61c351851cb46831f8a6bd2fccc1d7109dbd36ffc2a5b07840b49533e3" name="libgnat-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="a9ba7adbf43cbbff1acb38fe9b2f70a54bdd0ec29334dd045254900856f113a8" name="libgo" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="0ec44bf5fd5a74bba6796ae1fb9edaec48a01d0720212e12482af4c30bec9a18" name="libgo" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="7f6e692d8d51bf7a857a0d40961321f2c4802a449d83991ee1df5cc33421a959" name="libgo" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="55e19806b36ac00cc7a72a2af00545042b22f023b2738ae2e52ee6a10f2f3062" name="libgo" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="1c2288ae0852e72c2921f0f4c7118d1c65fa8b32d6815441c3be696cdf958314" name="libgo-devel" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="3a47a83e4bd5925911afc7baac42152cf9855be9238c6aad174c9654da2aa51b" name="libgo-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="07225503224fb02f3b9c5c4313c03a60e68228a832ac4fc717c480186dd38181" name="libgo-devel" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="23fb12edab5fcd9fa9a75e1601f09a8e5ba0d39e20e338f99efb74f047cc01bd" name="libgo-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="bb72ab4c6a298e3e3346bb28e789afc4f94a8aa5dce774559575a13ead37e69b" name="libgo-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="5eb1fac94d250ebf1a275cd539adc9ba52897adfb54819137711d6819f5dfbd0" name="libgo-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="9abbe7b0b04434682e23a354fc6c7fd1b4c54307ed1b4c506236234e26d184c1" name="libgo-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="7e6717e3f396e4e6b71aba6d635978546a9db2042e94165bf33a1b50a0e65169" name="libgo-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="e63a4e6bd8930aa24460ad36c424c79b9912559348c5ca85be1f222aaa8d6ff8" name="libgomp" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="58e12f40a70a88e1830e57be7dd00195873838dfe542f5bba96cf622ada56e13" name="libgomp" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="fc7567a567b979a77626283ae165fcdcfa8b02d9af143a15aed00befa2e2b4f9" name="libgomp" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="0f294f22e3732a73dd5f4bd92f68d80fa4d475044f1adc8cb06cab4fd70846c7" name="libgomp" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="8e58e357545b9213824490cfe7cb5944df470e65fb2d8b3d62a126d69cc4fbd5" name="libgudev1" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="cf9f9727975fe4acb8f531299186749780ccf36f304dedb785b3d90e93dcfcbb" name="libgudev1" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="5e9dc08ab0a8107dbb67b194c5782b30aa0c76d1b87d1cca694bc274226c40c7" name="libgudev1" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="77dad9f9399cca9db5cbd195340615e59ca2c7bde8839fa7e498434101e85634" name="libgudev1" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="af8d53b77056d73d25a6aca32ad3721e85c4c6471b0d97757d6287a5051591a6" name="libgudev1" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="a7e073f68ecbeeef0e3895a662e1f463e84cecfcb444b8f0726a09d07d2e83ee" name="libgudev1" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="ab8a023d00db3a8339ff3522a62fd399cc3ac59fce11e479ce235fe0fcfc8fce" name="libgudev1" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="a815bf38ca671388d2e7848d150eea6bd2f5e14f4329aefd601d478d0d02c4af" name="libgudev1" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="b35b6d49ecc32ffc7cb6b8540afa87b3884e51bd11fadc6f14d7d54eb1cf6fed" name="libgudev1" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="9c28ae85b27ed2255ac162ae3b7d71be4410f604fa098b9403004ecb16113eb7" name="libgudev1" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="9dd1aff90cec194758c4e069f791f5d46d67f1fd18cfa081c7d63062b1757a36" name="libgudev1-devel" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="3bb14c1b8c22cc31ff306abf07d32daeb5ad519fb9783c67ec829379a1ee7f45" name="libgudev1-devel" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="dc693205b94ebed6519b60578229ff31fb4d07a1231a89e694731ff59353f3f8" name="libgudev1-devel" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="1a45f91c93c6b00945868daaed7deb2fa940e99e9725c9533531a1ce2fa64479" name="libgudev1-devel" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="c89cdeceee2719a52e03eae8e598e9115367412f82f31c21304e218d52ae435c" name="libgudev1-devel" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="8d1a95c17f7ea9702cfa9f6046edb0b6f9fd01aa69e4ecf42ccee2a0b61fc107" name="libgudev1-devel" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="400b296343db53f12246f879417bd90fc16a84822de413c4ea6566f3af0a52b4" name="libgudev1-devel" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="adf07c7cd775fefcf86f8e16d9505c5774405589f367b4098d21b040a4895641" name="libgudev1-devel" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="f3f039beee04c7e4b97bdf13ba5bd1165136cef2679b70fd158728595c462b78" name="libgudev1-devel" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="81ed50254c64e84a960887947c8208e0d1608ac3d1c520612f74e8ce506fce1c" name="libgudev1-devel" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="0b68fc4ba281e96bbe656b43d540c573ab445f8f1c7d1f8d6f40edbc5eb0210b" name="libguestfs" arch="src">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.50" date="1440936000">- v2v:
  * When debugging, dump OVF to stderr.
  * Ignore missing kernels from grub
    resolves: rhbz#1230412
  * Calculate VMware dcPath correctly (1256823)
  * Map empty VMware network or bridge name to default (1257895)
- p2v:
  * Wait for network to come online before testing connection
    resolves: rhbz#1256222
- Fix tests to run correctly with libguestfs-winsupport 7.2.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.51" date="1441108800">- v2v: Fix handling of extra slashes in dcPath calculation
  resolves: rhbz#1258342 rhbz#1256823
- v2v: Fix -oa preallocation option
  resolves: rhbz#1251909</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
</package>
<package pkgid="4ea2368460080ddeedb3fb45bb31d587e61945f27f10a569c720c8b43090cce4" name="libguestfs" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.50" date="1440936000">- v2v:
  * When debugging, dump OVF to stderr.
  * Ignore missing kernels from grub
    resolves: rhbz#1230412
  * Calculate VMware dcPath correctly (1256823)
  * Map empty VMware network or bridge name to default (1257895)
- p2v:
  * Wait for network to come online before testing connection
    resolves: rhbz#1256222
- Fix tests to run correctly with libguestfs-winsupport 7.2.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.51" date="1441108800">- v2v: Fix handling of extra slashes in dcPath calculation
  resolves: rhbz#1258342 rhbz#1256823
- v2v: Fix -oa preallocation option
  resolves: rhbz#1251909</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
</package>
<package pkgid="cc589e8295a9930d36879d53bd191406790e5bc0f7d40fb5c4a27b323d7be631" name="libguestfs" arch="src">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="4cf6cf206355d9a170fea029ace1bb97e144fbaa6510cf92bff10e12c5d239dd" name="libguestfs" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="dbda0acac6acddb02a359d229160dad0ec4d60f9c041f2724483fb96f7fbf042" name="libguestfs-bash-completion" arch="noarch">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.50" date="1440936000">- v2v:
  * When debugging, dump OVF to stderr.
  * Ignore missing kernels from grub
    resolves: rhbz#1230412
  * Calculate VMware dcPath correctly (1256823)
  * Map empty VMware network or bridge name to default (1257895)
- p2v:
  * Wait for network to come online before testing connection
    resolves: rhbz#1256222
- Fix tests to run correctly with libguestfs-winsupport 7.2.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.51" date="1441108800">- v2v: Fix handling of extra slashes in dcPath calculation
  resolves: rhbz#1258342 rhbz#1256823
- v2v: Fix -oa preallocation option
  resolves: rhbz#1251909</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
</package>
<package pkgid="b92a7e559329e92fe0d021bc8defe3982c1a55bc5372f4d0b98f0619f1e6f8f1" name="libguestfs-bash-completion" arch="noarch">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="5c969bddfa9df25296fe81a73a17ac6224501ba4cea6ab72c00446c26976c1ee" name="libguestfs-benchmarking" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.50" date="1440936000">- v2v:
  * When debugging, dump OVF to stderr.
  * Ignore missing kernels from grub
    resolves: rhbz#1230412
  * Calculate VMware dcPath correctly (1256823)
  * Map empty VMware network or bridge name to default (1257895)
- p2v:
  * Wait for network to come online before testing connection
    resolves: rhbz#1256222
- Fix tests to run correctly with libguestfs-winsupport 7.2.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.51" date="1441108800">- v2v: Fix handling of extra slashes in dcPath calculation
  resolves: rhbz#1258342 rhbz#1256823
- v2v: Fix -oa preallocation option
  resolves: rhbz#1251909</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
</package>
<package pkgid="99dec046f270492b74974f0a5331ee6e4392e7a97c026bf259adc7e8f36da009" name="libguestfs-benchmarking" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="01db3605f4fbae2ed9fd254caf3b24aa91ca4af974c312feafab035995222a40" name="libguestfs-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.50" date="1440936000">- v2v:
  * When debugging, dump OVF to stderr.
  * Ignore missing kernels from grub
    resolves: rhbz#1230412
  * Calculate VMware dcPath correctly (1256823)
  * Map empty VMware network or bridge name to default (1257895)
- p2v:
  * Wait for network to come online before testing connection
    resolves: rhbz#1256222
- Fix tests to run correctly with libguestfs-winsupport 7.2.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.51" date="1441108800">- v2v: Fix handling of extra slashes in dcPath calculation
  resolves: rhbz#1258342 rhbz#1256823
- v2v: Fix -oa preallocation option
  resolves: rhbz#1251909</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
</package>
<package pkgid="42364d7a9737434cc99d9f3f65602f7b237b33bd7eda4cb516c65e86e7c82cc5" name="libguestfs-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="21c19b830c5ea215e35114c980a12ac305d6e8c3c34a3614e71cc0e76ae910ae" name="libguestfs-devel" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.50" date="1440936000">- v2v:
  * When debugging, dump OVF to stderr.
  * Ignore missing kernels from grub
    resolves: rhbz#1230412
  * Calculate VMware dcPath correctly (1256823)
  * Map empty VMware network or bridge name to default (1257895)
- p2v:
  * Wait for network to come online before testing connection
    resolves: rhbz#1256222
- Fix tests to run correctly with libguestfs-winsupport 7.2.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.51" date="1441108800">- v2v: Fix handling of extra slashes in dcPath calculation
  resolves: rhbz#1258342 rhbz#1256823
- v2v: Fix -oa preallocation option
  resolves: rhbz#1251909</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
</package>
<package pkgid="d2661d34e223b26810220921df1d6b10880059d8b82a931ef92be4f6179e2c87" name="libguestfs-devel" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="dc378a47a278ad54af83c50701b80c4f5a67585668d55203c7e97e711c1b3776" name="libguestfs-gfs2" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.50" date="1440936000">- v2v:
  * When debugging, dump OVF to stderr.
  * Ignore missing kernels from grub
    resolves: rhbz#1230412
  * Calculate VMware dcPath correctly (1256823)
  * Map empty VMware network or bridge name to default (1257895)
- p2v:
  * Wait for network to come online before testing connection
    resolves: rhbz#1256222
- Fix tests to run correctly with libguestfs-winsupport 7.2.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.51" date="1441108800">- v2v: Fix handling of extra slashes in dcPath calculation
  resolves: rhbz#1258342 rhbz#1256823
- v2v: Fix -oa preallocation option
  resolves: rhbz#1251909</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
</package>
<package pkgid="458b5b6eb6e2d191bf30609b181274fe493b2a7d6045632f8dc1fc4f0456e842" name="libguestfs-gfs2" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="d8b2b2d1b3fce0b3dc62449e20a19f89ed18afeb1a4d4faa5306107fe49a67e3" name="libguestfs-gobject" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.50" date="1440936000">- v2v:
  * When debugging, dump OVF to stderr.
  * Ignore missing kernels from grub
    resolves: rhbz#1230412
  * Calculate VMware dcPath correctly (1256823)
  * Map empty VMware network or bridge name to default (1257895)
- p2v:
  * Wait for network to come online before testing connection
    resolves: rhbz#1256222
- Fix tests to run correctly with libguestfs-winsupport 7.2.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.51" date="1441108800">- v2v: Fix handling of extra slashes in dcPath calculation
  resolves: rhbz#1258342 rhbz#1256823
- v2v: Fix -oa preallocation option
  resolves: rhbz#1251909</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
</package>
<package pkgid="e1e317cbdac9b8228e4c7e8516497afa9b817fb9dd4dd1256219508cd1900689" name="libguestfs-gobject" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="c4a2c4ac64239e102535bb11ef288e223efd31670d6fba54bdcb808fbe382d9e" name="libguestfs-gobject-devel" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.50" date="1440936000">- v2v:
  * When debugging, dump OVF to stderr.
  * Ignore missing kernels from grub
    resolves: rhbz#1230412
  * Calculate VMware dcPath correctly (1256823)
  * Map empty VMware network or bridge name to default (1257895)
- p2v:
  * Wait for network to come online before testing connection
    resolves: rhbz#1256222
- Fix tests to run correctly with libguestfs-winsupport 7.2.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.51" date="1441108800">- v2v: Fix handling of extra slashes in dcPath calculation
  resolves: rhbz#1258342 rhbz#1256823
- v2v: Fix -oa preallocation option
  resolves: rhbz#1251909</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
</package>
<package pkgid="b9a6f2e656a2f8f1e7583c392aabd151dedfceeb0b85adce18ada4e781d1cb9a" name="libguestfs-gobject-devel" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="5887235940d9941d2d2c51dcbc5febd80055f19e95dcb4d12ff443081226bf2b" name="libguestfs-gobject-doc" arch="noarch">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.50" date="1440936000">- v2v:
  * When debugging, dump OVF to stderr.
  * Ignore missing kernels from grub
    resolves: rhbz#1230412
  * Calculate VMware dcPath correctly (1256823)
  * Map empty VMware network or bridge name to default (1257895)
- p2v:
  * Wait for network to come online before testing connection
    resolves: rhbz#1256222
- Fix tests to run correctly with libguestfs-winsupport 7.2.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.51" date="1441108800">- v2v: Fix handling of extra slashes in dcPath calculation
  resolves: rhbz#1258342 rhbz#1256823
- v2v: Fix -oa preallocation option
  resolves: rhbz#1251909</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
</package>
<package pkgid="82b30f619c935d0c0243d32ca12dca01829f36bfffcea8359e0cb1a256b703d2" name="libguestfs-gobject-doc" arch="noarch">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="2ec58d66137ed1d9ef90a537e5dcd81acdae00409a4d0b26bd25f54590e878e1" name="libguestfs-inspect-icons" arch="noarch">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.50" date="1440936000">- v2v:
  * When debugging, dump OVF to stderr.
  * Ignore missing kernels from grub
    resolves: rhbz#1230412
  * Calculate VMware dcPath correctly (1256823)
  * Map empty VMware network or bridge name to default (1257895)
- p2v:
  * Wait for network to come online before testing connection
    resolves: rhbz#1256222
- Fix tests to run correctly with libguestfs-winsupport 7.2.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.51" date="1441108800">- v2v: Fix handling of extra slashes in dcPath calculation
  resolves: rhbz#1258342 rhbz#1256823
- v2v: Fix -oa preallocation option
  resolves: rhbz#1251909</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
</package>
<package pkgid="57b5fce10b0b152c5564a6034118b2e05677ce7fd7e201aceed955dff488f480" name="libguestfs-inspect-icons" arch="noarch">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="b4119a20758c45f699f538ad506b12460b2855e179a8132b77905f4f9f751d81" name="libguestfs-java" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.50" date="1440936000">- v2v:
  * When debugging, dump OVF to stderr.
  * Ignore missing kernels from grub
    resolves: rhbz#1230412
  * Calculate VMware dcPath correctly (1256823)
  * Map empty VMware network or bridge name to default (1257895)
- p2v:
  * Wait for network to come online before testing connection
    resolves: rhbz#1256222
- Fix tests to run correctly with libguestfs-winsupport 7.2.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.51" date="1441108800">- v2v: Fix handling of extra slashes in dcPath calculation
  resolves: rhbz#1258342 rhbz#1256823
- v2v: Fix -oa preallocation option
  resolves: rhbz#1251909</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
</package>
<package pkgid="ec01d41811c4313045f32acd156db189287b3dc667e94889f5690a4637ad175f" name="libguestfs-java" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="f6280bfb79a604ace40930efa832b1b0efb27d436abbf49f5455e2f45c59c7d1" name="libguestfs-java-devel" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.50" date="1440936000">- v2v:
  * When debugging, dump OVF to stderr.
  * Ignore missing kernels from grub
    resolves: rhbz#1230412
  * Calculate VMware dcPath correctly (1256823)
  * Map empty VMware network or bridge name to default (1257895)
- p2v:
  * Wait for network to come online before testing connection
    resolves: rhbz#1256222
- Fix tests to run correctly with libguestfs-winsupport 7.2.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.51" date="1441108800">- v2v: Fix handling of extra slashes in dcPath calculation
  resolves: rhbz#1258342 rhbz#1256823
- v2v: Fix -oa preallocation option
  resolves: rhbz#1251909</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
</package>
<package pkgid="b2d51e40474b9d7a97bf1b935fc63d6a8c5c4f336f62d6167ecee3b754b31861" name="libguestfs-java-devel" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="07dcf897912c8ce2b8fde1c18fc28e89ccf60cf4c9dc28250b6c96c72fcccc49" name="libguestfs-javadoc" arch="noarch">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.50" date="1440936000">- v2v:
  * When debugging, dump OVF to stderr.
  * Ignore missing kernels from grub
    resolves: rhbz#1230412
  * Calculate VMware dcPath correctly (1256823)
  * Map empty VMware network or bridge name to default (1257895)
- p2v:
  * Wait for network to come online before testing connection
    resolves: rhbz#1256222
- Fix tests to run correctly with libguestfs-winsupport 7.2.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.51" date="1441108800">- v2v: Fix handling of extra slashes in dcPath calculation
  resolves: rhbz#1258342 rhbz#1256823
- v2v: Fix -oa preallocation option
  resolves: rhbz#1251909</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
</package>
<package pkgid="75857cd8e5e2308cf24e5b8c4628794325bbed0c3827f7ba098ff9b2e6aabb5d" name="libguestfs-javadoc" arch="noarch">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="b11e4ae8f951cf0ef1083fe385772b94de78abec053e8482534dd2d7eed9623e" name="libguestfs-man-pages-ja" arch="noarch">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.50" date="1440936000">- v2v:
  * When debugging, dump OVF to stderr.
  * Ignore missing kernels from grub
    resolves: rhbz#1230412
  * Calculate VMware dcPath correctly (1256823)
  * Map empty VMware network or bridge name to default (1257895)
- p2v:
  * Wait for network to come online before testing connection
    resolves: rhbz#1256222
- Fix tests to run correctly with libguestfs-winsupport 7.2.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.51" date="1441108800">- v2v: Fix handling of extra slashes in dcPath calculation
  resolves: rhbz#1258342 rhbz#1256823
- v2v: Fix -oa preallocation option
  resolves: rhbz#1251909</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
</package>
<package pkgid="077f1ce6d146164bdcebbd0bb487b64c8e0f6799bc2a84d7e9c208ec45c68954" name="libguestfs-man-pages-ja" arch="noarch">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="efa502a06122d8f9a0e8db329b4b9b3da20e9273678d3b28343234169fa7e3c0" name="libguestfs-man-pages-uk" arch="noarch">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.50" date="1440936000">- v2v:
  * When debugging, dump OVF to stderr.
  * Ignore missing kernels from grub
    resolves: rhbz#1230412
  * Calculate VMware dcPath correctly (1256823)
  * Map empty VMware network or bridge name to default (1257895)
- p2v:
  * Wait for network to come online before testing connection
    resolves: rhbz#1256222
- Fix tests to run correctly with libguestfs-winsupport 7.2.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.51" date="1441108800">- v2v: Fix handling of extra slashes in dcPath calculation
  resolves: rhbz#1258342 rhbz#1256823
- v2v: Fix -oa preallocation option
  resolves: rhbz#1251909</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
</package>
<package pkgid="784e59e7f2e46741a01d451f288d2966f58de0e3ec158a5c34981faed75bb0c8" name="libguestfs-man-pages-uk" arch="noarch">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="bbb4331e37426078a88ba8d69edd782c6670c35476db132cd7e24487d0b2feae" name="libguestfs-rescue" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.50" date="1440936000">- v2v:
  * When debugging, dump OVF to stderr.
  * Ignore missing kernels from grub
    resolves: rhbz#1230412
  * Calculate VMware dcPath correctly (1256823)
  * Map empty VMware network or bridge name to default (1257895)
- p2v:
  * Wait for network to come online before testing connection
    resolves: rhbz#1256222
- Fix tests to run correctly with libguestfs-winsupport 7.2.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.51" date="1441108800">- v2v: Fix handling of extra slashes in dcPath calculation
  resolves: rhbz#1258342 rhbz#1256823
- v2v: Fix -oa preallocation option
  resolves: rhbz#1251909</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
</package>
<package pkgid="926cc3bfc04df4b4dbd5a42f77c90a9752c4ae50ac251d17bdb7477233bdaf0b" name="libguestfs-rescue" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="13362439fefb04712f9d618b7355eb314e4ba663182448e6a5a574375c732f47" name="libguestfs-rsync" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.50" date="1440936000">- v2v:
  * When debugging, dump OVF to stderr.
  * Ignore missing kernels from grub
    resolves: rhbz#1230412
  * Calculate VMware dcPath correctly (1256823)
  * Map empty VMware network or bridge name to default (1257895)
- p2v:
  * Wait for network to come online before testing connection
    resolves: rhbz#1256222
- Fix tests to run correctly with libguestfs-winsupport 7.2.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.51" date="1441108800">- v2v: Fix handling of extra slashes in dcPath calculation
  resolves: rhbz#1258342 rhbz#1256823
- v2v: Fix -oa preallocation option
  resolves: rhbz#1251909</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
</package>
<package pkgid="2962888673a53f5f6973b0081243379b6d9ae4b49a42b01d59c2ff9f6000d4e0" name="libguestfs-rsync" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="cb947431566cb4a6213d7aa93abc18ef7d7607ddd4dfd39e65899ddd8c22aa86" name="libguestfs-tools" arch="noarch">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.50" date="1440936000">- v2v:
  * When debugging, dump OVF to stderr.
  * Ignore missing kernels from grub
    resolves: rhbz#1230412
  * Calculate VMware dcPath correctly (1256823)
  * Map empty VMware network or bridge name to default (1257895)
- p2v:
  * Wait for network to come online before testing connection
    resolves: rhbz#1256222
- Fix tests to run correctly with libguestfs-winsupport 7.2.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.51" date="1441108800">- v2v: Fix handling of extra slashes in dcPath calculation
  resolves: rhbz#1258342 rhbz#1256823
- v2v: Fix -oa preallocation option
  resolves: rhbz#1251909</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
</package>
<package pkgid="5e4e8903c066ce8f3f0d13f25c9fcf4f2cd8dc4973bb665b77e61d1797c9a50c" name="libguestfs-tools" arch="noarch">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="551fbcfd40970d8e80810bcd7c28a810c507a6f3c3afd3585a3c31d60367ccf0" name="libguestfs-tools-c" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.50" date="1440936000">- v2v:
  * When debugging, dump OVF to stderr.
  * Ignore missing kernels from grub
    resolves: rhbz#1230412
  * Calculate VMware dcPath correctly (1256823)
  * Map empty VMware network or bridge name to default (1257895)
- p2v:
  * Wait for network to come online before testing connection
    resolves: rhbz#1256222
- Fix tests to run correctly with libguestfs-winsupport 7.2.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.51" date="1441108800">- v2v: Fix handling of extra slashes in dcPath calculation
  resolves: rhbz#1258342 rhbz#1256823
- v2v: Fix -oa preallocation option
  resolves: rhbz#1251909</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
</package>
<package pkgid="5d451231e121e5479005e9a2b71e4e45fb13a110338c1f02ca3d868aa712b4ce" name="libguestfs-tools-c" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="9d0647b712e156f0e75bd27d162a5c3a3ce7ff2ed2f07e6baff38b7e8c42bb0c" name="libguestfs-xfs" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.50" date="1440936000">- v2v:
  * When debugging, dump OVF to stderr.
  * Ignore missing kernels from grub
    resolves: rhbz#1230412
  * Calculate VMware dcPath correctly (1256823)
  * Map empty VMware network or bridge name to default (1257895)
- p2v:
  * Wait for network to come online before testing connection
    resolves: rhbz#1256222
- Fix tests to run correctly with libguestfs-winsupport 7.2.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.51" date="1441108800">- v2v: Fix handling of extra slashes in dcPath calculation
  resolves: rhbz#1258342 rhbz#1256823
- v2v: Fix -oa preallocation option
  resolves: rhbz#1251909</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
</package>
<package pkgid="8b7ed8e6c365ae0212eb6a46b44ea73c4f96516b41081fe679ebf2ec90fa123c" name="libguestfs-xfs" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="096ab351b7d03c28aa55e2f4137b082cff47adb33092cf6772962516cf09c3f3" name="libipa_hbac" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="69f2ffd632fd0c2fd261e57266913182604cbb32a46cb97bf4df3def4ab0efa3" name="libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="9fc49adbca00d6e67780bcadfeb87c194c9f5645d247070d8c24f5660bdf9274" name="libipa_hbac" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="a636bd993c8852d93a4a5ab4c7986bb2011eda44c432557403ea7d2b1abc4749" name="libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="a58ba8afc2f5050fcf0563bd8baf25d6a54af389a80d7a0f606f1e77b7693433" name="libipa_hbac" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="32b7035aced1b997a0bae8bbee20ed86032f8cbf9ddae722f8e8b9556b1bbe73" name="libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="186559f238b05a07c4aa4766737120db4bfad8595deb51e83e405f623135a0c4" name="libipa_hbac" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="3fc7754a2e09cbb93dd49a3519729301e7128fe217733427829eef100440074d" name="libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="7a8aded903ab2af0f80834f13afd8530858ba641c4f4d9bfe70d13e5f1d1cf22" name="libipa_hbac-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="c95e7ec3ed6f502886dde59801a728ee7a3719be9585e6159ecc56b449689751" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="23aff2df91117ddbd10c71842bde88f61b710e9994493e1a35094a2002e6f846" name="libipa_hbac-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="bd4f67f93d699bf9b4775ddf936fbb6a0a70b6c593f13b7054016887d9ac8ea4" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="b983b5266bb12d06e179ff647af2601776d8fd589b6e98e8a371ade677ef613b" name="libipa_hbac-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="dfa69eaf3c0bf6a468306c9bf5a6c5d3f9437f0ee8bab02446aca2cd90d34460" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="3ea1385422c8cc3b1ec5c0dde6b6ef6e7ee5858bb6d0b3d1a73658e9a062ea92" name="libipa_hbac-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="0efac3ace8e76ba64522ba0d8cd244a5d7dfb1dac3e4dcfa1821ba07b0a2a09f" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="6eee7eed5017809ab73e30279f67711f5a61010b5bd656535229a30240b15c3a" name="libitm" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="69362e58dda24efb7a2fa96138617bbbc06d1901eee4529468252b08a99b59a2" name="libitm" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="0571bc0f24ce8a42bab3ea70427ad7c25968f9b31c73d88d9bc53feb9d7b06da" name="libitm" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="d11431eaf89324eec613e12796544606be6b63c552c901162add2415f133d14e" name="libitm" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="1b36366f653495370c04493e3f3efe457601a133e0d4360a503f37daa810c9a6" name="libitm-devel" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="a092a2caacfe006827088a9b4c657c88857efa583a145faed8251c0194fb22be" name="libitm-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="e9918bb18b6eddd8cb059e3cbbff1dcf1fd7cf40e9dc0c98282391a8e0309a83" name="libitm-devel" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="d4d0071ed5ef27bb661228c9989bf195751aebd272554b7ae8c8c7d56849a5e0" name="libitm-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="4338b9c7a5f5413be1a3efe36f062fd082ebf029dd9ff9cc6137da229b3c2fc9" name="libitm-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="ca3db93143590164cf9c5de7667d0f41ca8ce643d46d876f2414f53a1f361554" name="libitm-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="9baf7c49d8d6a67776a0a3454c17596aa33eeba058a13b1eccc8dab5a1393ff1" name="libitm-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="48f07cdff835387a237743cce069f3f511eadc05fd6063a3fe552c247c4ee9a9" name="libitm-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="b724a7e03fd6f8d759f3beb7446480abfd223f739888854489454383c405fc6f" name="liblouis" arch="i686">
  <version epoch="0" ver="2.5.2" rel="11.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-2" date="1361534400">- Moved documentation to doc subpackage.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
</package>
<package pkgid="7ac92dae9e08be8b1cbb6d805ece2df93032f4c7960a731240ab7863d4a15872" name="liblouis" arch="src">
  <version epoch="0" ver="2.5.2" rel="11.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-2" date="1361534400">- Moved documentation to doc subpackage.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
</package>
<package pkgid="7fa3aa96015ccdf78974ea425a4ebd6c3dc58a1b2bd980ad0e35d5480c4d852c" name="liblouis" arch="src">
  <version epoch="0" ver="2.5.2" rel="11.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-2" date="1361534400">- Moved documentation to doc subpackage.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
</package>
<package pkgid="332db6dad9a7a1ad5d3ef2b562f4188901a18b62cc502329a0b6b549f5e3a313" name="liblouis" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="11.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-2" date="1361534400">- Moved documentation to doc subpackage.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
</package>
<package pkgid="f9b7691c8972e0e22178e320b9251861b419637892c1a42e8a336f67ff1cb801" name="liblouis" arch="i686">
  <version epoch="0" ver="2.5.2" rel="12.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-12" date="1510315200">- Resolves: CVE-2017-15101</changelog>
</package>
<package pkgid="a0359dc267e070c9c26cb30acd9f256151c7a0ab2db79fd548a769dbf5a021ee" name="liblouis" arch="src">
  <version epoch="0" ver="2.5.2" rel="12.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-12" date="1510315200">- Resolves: CVE-2017-15101</changelog>
</package>
<package pkgid="935f6d9280cdb0a1214929028dec81cd8c541ca99aaca94d5cf19a92bc340ec2" name="liblouis" arch="src">
  <version epoch="0" ver="2.5.2" rel="12.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-12" date="1510315200">- Resolves: CVE-2017-15101</changelog>
</package>
<package pkgid="f506f9849ec28bfbac1a8acbac454f4997c66cc0bb15df598d45e25b2f15ab53" name="liblouis" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="12.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-12" date="1510315200">- Resolves: CVE-2017-15101</changelog>
</package>
<package pkgid="d8d632415e2b5434ed97afc17a240f721ddaa4aff7a4ec6bb43d9ff63fab8ebd" name="liblouis-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.2" rel="11.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-2" date="1361534400">- Moved documentation to doc subpackage.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
</package>
<package pkgid="75c4e6ae8544aa2653281f143e3c1c39deeee0ef17d5b2acf16fd5e8b42c3688" name="liblouis-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="11.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-2" date="1361534400">- Moved documentation to doc subpackage.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
</package>
<package pkgid="2c104dd26ba26534a004c4ef61ac6f03be434ace1612e726ddd154952c966b9e" name="liblouis-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.2" rel="12.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-12" date="1510315200">- Resolves: CVE-2017-15101</changelog>
</package>
<package pkgid="9375dbcb2d039db2b05dba1581a6024add0ed15ce5d2109273e15d6fa9b4025c" name="liblouis-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="12.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-12" date="1510315200">- Resolves: CVE-2017-15101</changelog>
</package>
<package pkgid="f2d7142ee06163e86ced3352e3a60c1c21cfce6160061d57e8ef5279b30ceb90" name="liblouis-devel" arch="i686">
  <version epoch="0" ver="2.5.2" rel="11.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-2" date="1361534400">- Moved documentation to doc subpackage.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
</package>
<package pkgid="281925d42dc5b61e25aad43f48d09c4a8b813d262db6721950c6a305d382cac8" name="liblouis-devel" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="11.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-2" date="1361534400">- Moved documentation to doc subpackage.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
</package>
<package pkgid="bb46ecf25ee8d9addc930e4528222fbca451a1ebaf9476651fc417895b6b0388" name="liblouis-devel" arch="i686">
  <version epoch="0" ver="2.5.2" rel="12.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-12" date="1510315200">- Resolves: CVE-2017-15101</changelog>
</package>
<package pkgid="ca2c13d2fa186760d71c14d536892af602bd5f3cea439256579b5fdbe6d452ec" name="liblouis-devel" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="12.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-12" date="1510315200">- Resolves: CVE-2017-15101</changelog>
</package>
<package pkgid="a9d134f19452854b3ed2609799643b294508af79a91dc3e4c00de4a508c68f7e" name="liblouis-doc" arch="noarch">
  <version epoch="0" ver="2.5.2" rel="11.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-2" date="1361534400">- Moved documentation to doc subpackage.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
</package>
<package pkgid="84bf15f49051c07ee137fa4cd080b111acdf28bd6cef4adedd8d8c51bb10300d" name="liblouis-doc" arch="noarch">
  <version epoch="0" ver="2.5.2" rel="11.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-2" date="1361534400">- Moved documentation to doc subpackage.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
</package>
<package pkgid="333a1ac7c12d496546180a1f239b4e5cc283f1127573cabe7fe05a46c7719ddd" name="liblouis-doc" arch="noarch">
  <version epoch="0" ver="2.5.2" rel="12.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-12" date="1510315200">- Resolves: CVE-2017-15101</changelog>
</package>
<package pkgid="8211eb8af0acfb72f131dcf9fbbee04e151c9c2ffc692c2df0f03d093c5522ff" name="liblouis-doc" arch="noarch">
  <version epoch="0" ver="2.5.2" rel="12.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-12" date="1510315200">- Resolves: CVE-2017-15101</changelog>
</package>
<package pkgid="35783dc5053cf6799fb1831e2100183567084b3e0466382702144f4c273111a3" name="liblouis-python" arch="noarch">
  <version epoch="0" ver="2.5.2" rel="11.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-2" date="1361534400">- Moved documentation to doc subpackage.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
</package>
<package pkgid="602d78ca787d570d49deadb1e054dce3b025f53ef1ed8097fa43ecaa89e1c0d5" name="liblouis-python" arch="noarch">
  <version epoch="0" ver="2.5.2" rel="11.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-2" date="1361534400">- Moved documentation to doc subpackage.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
</package>
<package pkgid="095110c8ffb96fa12531b325354ab717a26419e501e29f470243646ffb31a8cd" name="liblouis-python" arch="noarch">
  <version epoch="0" ver="2.5.2" rel="12.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-12" date="1510315200">- Resolves: CVE-2017-15101</changelog>
</package>
<package pkgid="836fba49f87543e9cf20dd221c054b6a5605affff9374431b45225e1b9470a3c" name="liblouis-python" arch="noarch">
  <version epoch="0" ver="2.5.2" rel="12.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-12" date="1510315200">- Resolves: CVE-2017-15101</changelog>
</package>
<package pkgid="0fc8cfbcd48c4f16df3fa56ab01c0f3306156f81f49cc0a5f196eb1e8ee24a58" name="liblouis-utils" arch="i686">
  <version epoch="0" ver="2.5.2" rel="11.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-2" date="1361534400">- Moved documentation to doc subpackage.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
</package>
<package pkgid="a57ae4fba39df0a150d49f5a40378462e523b586c6e3341bc7ddf35bdbd09b1b" name="liblouis-utils" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="11.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-2" date="1361534400">- Moved documentation to doc subpackage.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
</package>
<package pkgid="9115c6f8409ef475f4016a677ff4f931654cd62090eca629cbdcd422e51086b3" name="liblouis-utils" arch="i686">
  <version epoch="0" ver="2.5.2" rel="12.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-12" date="1510315200">- Resolves: CVE-2017-15101</changelog>
</package>
<package pkgid="d75f3af022ea334f6e124dcf4ca626461c1f243a06e0adb3c6c8bf311f44c848" name="liblouis-utils" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="12.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-12" date="1510315200">- Resolves: CVE-2017-15101</changelog>
</package>
<package pkgid="dbeba3cdf5f740660818ff36a7b738674987063dcddd890a02562b4e7083a0c2" name="libmount" arch="i686">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="d8076a18394db92d27912ac0bb3f8327d250d59e1c0c441667f2d4ae54966b36" name="libmount" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="71fe401faceabcec18695d2cac8aece55585b26a28644a1e71b2126c4ccb1a3c" name="libmount-devel" arch="i686">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="e411a155f227e3109c52259799d01763d1951950ed025548ff8f881b4a9e39eb" name="libmount-devel" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="df87cc16167ab276cb8b9ea5c7f36c9108de460fa6696d70042dd12a37fdd424" name="libmudflap" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="8ec9b9fa4e0ccd6575259a5bd969d1602bafb79113bf3e6a7d53936fb8e25c5b" name="libmudflap" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="86fcbb8c4a1e0d2e225ec38679d29c9bde8a83af4d07aa5606adc0e0685a34e2" name="libmudflap" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="540c853702d8a2c8ea7e602238eee51f7ad4adbc71c5b18f9c7feccb2e386260" name="libmudflap" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="3e42d5d96b4d793524d5f6d8e0cdaaf4f7f848dd950beb7c65ce6a6ea77370c2" name="libmudflap-devel" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="76676e87902252056b6586400433af058977e259c9bed111466f3d6bcfd1bf33" name="libmudflap-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="daf166c9a7f048621c5554c207ac0c26501a045f2964ddd60735c7c5d04da259" name="libmudflap-devel" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="f445ce03a7c4d4dea573e7a0f3965ccbda653803b11829324f9338627a8e2ee4" name="libmudflap-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="ae24c41b6df901b4a65ad099957713a59a7d85de68c975613ba32a3fa1d1e9f1" name="libmudflap-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="104946b4f16588334f08324fa3fa0cca2ba311202864826f8f50a2ddffdeb6e3" name="libmudflap-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="4f0aa6e9ed7de182fcb7450df83f10067dee67ba8599a8d0ad1db3cf97e6615b" name="libmudflap-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="e2235cbd0b9b14e620d9059d4b196b83285427940d453206a31ce7aa5c938e77" name="libmudflap-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="3a4afc90d056e2057fb99dd4d25c6339e038116a9008d2c6b4dd74cf1f9d76ee" name="libobjc" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="4e292b5131d071f82e622c5922330ed4cd92cbbf77c6da47f29ba95148a803af" name="libobjc" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="28856a2e952f77dccc5dfe408deb04ec18e92a20106cca3431635d0026a424ec" name="libobjc" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="198d01a6c49c92151dd56ce508be72ad0da145379e1013ae17e02ae9fb5d79d7" name="libobjc" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="60d04cbf1a85d7d965aced81ee89245994ada9b1fc5bfb717f9d22c1105ace31" name="libpciaccess" arch="i686">
  <version epoch="0" ver="0.13.4" rel="3.1.el7_4"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13-2" date="1332936000">- libpciaccess-macros.patch: Fix out* macros again</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13.1-1" date="1334059200">- libpciaccess 0.13.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.1-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.13.1-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13.1-4.1" date="1392206400">- Mass rebuild</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 0.13.4-1" date="1432209600">- rebase libpciaccess 0.13.4</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 0.13.4-2" date="1432296000">- rebuild due to ppc64le relro issue</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 0.13.4-3" date="1479124800">- add support to ignore 32-bit domains (#1380184)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 0.13.4-3.1" date="1509019200">- Add support for 32-bit domains</changelog>
</package>
<package pkgid="13b99495afa912ebcc4e16f33ee87de929b41045f20b692b174bf109425ee59d" name="libpciaccess" arch="src">
  <version epoch="0" ver="0.13.4" rel="3.1.el7_4"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13-2" date="1332936000">- libpciaccess-macros.patch: Fix out* macros again</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13.1-1" date="1334059200">- libpciaccess 0.13.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.1-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.13.1-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13.1-4.1" date="1392206400">- Mass rebuild</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 0.13.4-1" date="1432209600">- rebase libpciaccess 0.13.4</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 0.13.4-2" date="1432296000">- rebuild due to ppc64le relro issue</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 0.13.4-3" date="1479124800">- add support to ignore 32-bit domains (#1380184)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 0.13.4-3.1" date="1509019200">- Add support for 32-bit domains</changelog>
</package>
<package pkgid="3a8dc9163ade3f741d18e8b5b89af79767a29066c44edc2c5218800514ad5320" name="libpciaccess" arch="src">
  <version epoch="0" ver="0.13.4" rel="3.1.el7_4"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13-2" date="1332936000">- libpciaccess-macros.patch: Fix out* macros again</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13.1-1" date="1334059200">- libpciaccess 0.13.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.1-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.13.1-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13.1-4.1" date="1392206400">- Mass rebuild</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 0.13.4-1" date="1432209600">- rebase libpciaccess 0.13.4</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 0.13.4-2" date="1432296000">- rebuild due to ppc64le relro issue</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 0.13.4-3" date="1479124800">- add support to ignore 32-bit domains (#1380184)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 0.13.4-3.1" date="1509019200">- Add support for 32-bit domains</changelog>
</package>
<package pkgid="1091cd5b620603ce5d27a82c1cc506b7b80ec5762601f0d26b52a5244e3b08a2" name="libpciaccess" arch="x86_64">
  <version epoch="0" ver="0.13.4" rel="3.1.el7_4"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13-2" date="1332936000">- libpciaccess-macros.patch: Fix out* macros again</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13.1-1" date="1334059200">- libpciaccess 0.13.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.1-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.13.1-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13.1-4.1" date="1392206400">- Mass rebuild</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 0.13.4-1" date="1432209600">- rebase libpciaccess 0.13.4</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 0.13.4-2" date="1432296000">- rebuild due to ppc64le relro issue</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 0.13.4-3" date="1479124800">- add support to ignore 32-bit domains (#1380184)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 0.13.4-3.1" date="1509019200">- Add support for 32-bit domains</changelog>
</package>
<package pkgid="41e2a7e020235690f24f5ccf16deaaae2bcc571ea3c169ce975c5ec103cf06ab" name="libpciaccess-debuginfo" arch="i686">
  <version epoch="0" ver="0.13.4" rel="3.1.el7_4"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13-2" date="1332936000">- libpciaccess-macros.patch: Fix out* macros again</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13.1-1" date="1334059200">- libpciaccess 0.13.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.1-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.13.1-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13.1-4.1" date="1392206400">- Mass rebuild</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 0.13.4-1" date="1432209600">- rebase libpciaccess 0.13.4</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 0.13.4-2" date="1432296000">- rebuild due to ppc64le relro issue</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 0.13.4-3" date="1479124800">- add support to ignore 32-bit domains (#1380184)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 0.13.4-3.1" date="1509019200">- Add support for 32-bit domains</changelog>
</package>
<package pkgid="99f4eb12d2ab1eada241e06f365148aa583add5319f7d0815e23c5f1a0e0570c" name="libpciaccess-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.13.4" rel="3.1.el7_4"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13-2" date="1332936000">- libpciaccess-macros.patch: Fix out* macros again</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13.1-1" date="1334059200">- libpciaccess 0.13.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.1-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.13.1-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13.1-4.1" date="1392206400">- Mass rebuild</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 0.13.4-1" date="1432209600">- rebase libpciaccess 0.13.4</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 0.13.4-2" date="1432296000">- rebuild due to ppc64le relro issue</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 0.13.4-3" date="1479124800">- add support to ignore 32-bit domains (#1380184)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 0.13.4-3.1" date="1509019200">- Add support for 32-bit domains</changelog>
</package>
<package pkgid="f487488ff55b7cc48cf89fe247e05e0296543668e134c3ced5212ae7b25bf03e" name="libpciaccess-devel" arch="i686">
  <version epoch="0" ver="0.13.4" rel="3.1.el7_4"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13-2" date="1332936000">- libpciaccess-macros.patch: Fix out* macros again</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13.1-1" date="1334059200">- libpciaccess 0.13.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.1-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.13.1-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13.1-4.1" date="1392206400">- Mass rebuild</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 0.13.4-1" date="1432209600">- rebase libpciaccess 0.13.4</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 0.13.4-2" date="1432296000">- rebuild due to ppc64le relro issue</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 0.13.4-3" date="1479124800">- add support to ignore 32-bit domains (#1380184)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 0.13.4-3.1" date="1509019200">- Add support for 32-bit domains</changelog>
</package>
<package pkgid="e1d0e330f3e92a34d0ee8a9626ba6aedd470b6373a453f01809ea2aa6bf7c3b8" name="libpciaccess-devel" arch="x86_64">
  <version epoch="0" ver="0.13.4" rel="3.1.el7_4"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13-2" date="1332936000">- libpciaccess-macros.patch: Fix out* macros again</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13.1-1" date="1334059200">- libpciaccess 0.13.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.1-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.13.1-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13.1-4.1" date="1392206400">- Mass rebuild</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 0.13.4-1" date="1432209600">- rebase libpciaccess 0.13.4</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 0.13.4-2" date="1432296000">- rebuild due to ppc64le relro issue</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 0.13.4-3" date="1479124800">- add support to ignore 32-bit domains (#1380184)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 0.13.4-3.1" date="1509019200">- Add support for 32-bit domains</changelog>
</package>
<package pkgid="f01251baae414c047829cf3905b692fe502939c26aa670f2e7f3fc779dfbaeba" name="libquadmath" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="a98c9ef3ad27e9b254f6d274bc22ba753fdca456bbe7d5e8d2c178ffc8c08101" name="libquadmath" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="5593cfb0321ebd4f9cd009fd396cf37c1aa380cc9803e03407e40e6756d6cf0f" name="libquadmath" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="cbf0b189c08062e449f00136f987ed9498ec070544042925dab423643373f38b" name="libquadmath" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="65807e74e497e19049ec1a8e792593ba02711c0d5dff4bb2d2a426b4f84f803a" name="libquadmath-devel" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="e16bab13d90cf4adcffb2a2d64bd3a195c8568f7cf483f574f8dd12cf7115721" name="libquadmath-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="f66be3473505a04facdf10cdd0a324320d5278a2bccf6adca6af610d00a39002" name="libquadmath-devel" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="40b2a14a28281349e5eb4dc2456faf37a6861cd0488094045020acb923147522" name="libquadmath-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="522f2358a89b9b5ca630a29ec15cd9fbbcada92bb2c55540ed61816a89a57da0" name="libquadmath-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="c0000dc156ca4c167f6fb256416b83028dbbee3c7a78860d5318c5ebc391f58e" name="libquadmath-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="11eeb762cae328f2dbca767759a1985b07bcd1ce033ae13e14864dbf386b818a" name="libquadmath-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="d1a4829e24cb4f9fd011129f7c119405ad0793a0608249a121798943860d0c18" name="libquadmath-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="37492ffb4f71d66f5896305827b02490ad3d48d68f0eda281e0318d612c97a56" name="libreoffice" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="eaabf4b60c062064ec77087bf48d669b9f53135bb02447dc3d1719c910fa0c58" name="libreoffice" arch="src">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="e77bb22a7bea693f167a03a72e2ab4f2d80dde0e1f1a73eaba894d5f1f0de670" name="libreoffice" arch="src">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="275ac1ee171444d8b5cf8db7c6b7da3b0dbd47e1a74ad5ffa4240364ed818c3b" name="libreoffice" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="72f262c634236bd35775172f9e914421cf9714783bbe4dd04d604199cade5f54" name="libreoffice-base" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="1baf2fe59fd2590309904012614b2bf0fd096859fa245e95b2825b3056904f3b" name="libreoffice-base" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="8583359cc165177f3bb83efbdff862591fefee471e4bf76d82777b63501b8396" name="libreoffice-bsh" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="1732142e8f74758d3b31d813bcbcac8bb8dfbc8b87272ab243143eff948d564d" name="libreoffice-bsh" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="9cdbded8fefe064c77ea5a06119338bf340083d143382a13ca4abd813d9ff15e" name="libreoffice-calc" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="a72dedf9a12672f38fa71eb652b2ff9c045d227e9e1b0d72887fe1fd1f80a89f" name="libreoffice-calc" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="cedf9abf1d98f4b2611bfe4efdb716e1c7608a3311092762d2462a51dd766767" name="libreoffice-core" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="f74f894e87c347fc0b31bc907dedad32f730c84acac0d094f65aa0708d202e6d" name="libreoffice-core" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="f8143efa47e9bb7ea2a3b8fa1d1eac2228910d33d8af5f8531009fac58ff5608" name="libreoffice-debuginfo" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="90635320cb753d1f10c4b033173f0c560a48042ca866f5c3c14f5764517633b1" name="libreoffice-debuginfo" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="844e7532c82e6ca50e149c81a8be2164e90227acc6ef48bd7f8ff34b9985843c" name="libreoffice-draw" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="75363ac01169f655e4b7225e9e633a77c2efa2e8de6df6887b6b23cb38610ca0" name="libreoffice-draw" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="73504ff871f4c72f5b5bf5639e625ecabff1cd9fb1a37a2d0814df2653b5584b" name="libreoffice-emailmerge" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="70647c2b50cf5866656b9368cf2168b22603732245764c3b04634d4314dc17ce" name="libreoffice-emailmerge" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="656e1c3fa1fc0337ec47368bdf7f0f21b6823303825019ea434b63114e8eab1a" name="libreoffice-filters" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="7b9bc66a869319f3a80811da98d6fe9871587072635007ffffe34f5c36874276" name="libreoffice-filters" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="cacf786386e8b2257f23850c4c8265c721bbae4750f9789e8d155316505f6f2a" name="libreoffice-gdb-debug-support" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="39061f658fb967f2dc3cbddb05a22f2a18c30974e3af20902621a426d21cd630" name="libreoffice-gdb-debug-support" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="b69d1e918b852f483aa835dc0549464b1edc51f40428cc9a7c36046ff7cd5fa5" name="libreoffice-glade" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="a9b49d7e8c261359adcf8d7a98b2de4dd4931c60245f9cad641cd8f4a4419838" name="libreoffice-glade" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="005cfcc46c047ac2a78df58fbf7b429d28d8c60ff4ee195f0aa023e2c2cd4142" name="libreoffice-graphicfilter" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="4a74b1f018a56ca75ef7429099fe577cc7871d5f397966a2eccdc836cc078290" name="libreoffice-graphicfilter" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="7cf3bcea0384ced13024b77ee2e685dff624241361f96e942f34d6b2c3375a66" name="libreoffice-impress" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="1157997228f6de27830c4586abd0c748c586367cc6303b3f243047f6757012fd" name="libreoffice-impress" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="d1bfe9bb6c1783c723a4f67bb0e7f80d271c448f790da8ba83d2e6add6a6f842" name="libreoffice-langpack-af" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="d1eb7de1b8fd49fd7c85e2e47f63243477fcef0ad7f3eea30f0a7334f799148e" name="libreoffice-langpack-af" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="d0f572a8911c78802e2d9c8606c6d6a6c8b75d50a1794dbeb5fb6aa271ce2a19" name="libreoffice-langpack-ar" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="1cc285c386d5fe431b8f6375f3c3f700ed9a1458de90ec5ca3556ffdd3ba68d2" name="libreoffice-langpack-ar" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="601985bc292384e8e94e7cb73b1217d526b1dd56ffc36fadb8999c531a043ad0" name="libreoffice-langpack-as" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="b7de25d465f6eb9268ef737e48dcdcadb629285ee5161ad4cf8c41dda4a26f09" name="libreoffice-langpack-as" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="b9eaac201cb77eef56234815ba44159e3c7efa440127387ae6e50d80112c0248" name="libreoffice-langpack-bg" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="f861ff31ce6084a16ee4a503de38dcbb69382ef8ed7e5cfc3327bd8ad82bbd8f" name="libreoffice-langpack-bg" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="5ad25a0eda27c1c2c9cfea8924248a1fddb1250bdf65f8895d5bf0310bc64fe7" name="libreoffice-langpack-bn" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="b271f5ab2850bea39e4fe8f7eb8098e0581922af2a3300493c45d4508a3fc0f5" name="libreoffice-langpack-bn" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="e72582ac74cd8666b30af56eb1b1e016d2cffe3546aaacefaed3505daf5739ca" name="libreoffice-langpack-br" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="e2c3e00d289beb237afb4f489ba68190c3e64cd0fdded81677f03fe87fc1b0aa" name="libreoffice-langpack-br" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="74483613e04e73c65e92d8c1cfbec88a404de34f75bc7c49cc0be0a3084c344f" name="libreoffice-langpack-ca" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="1d12afb862de3602fdfcec520032e17407b2bb56e1fa2f0ffffc8cb041931ee7" name="libreoffice-langpack-ca" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="aa6fdb7613db40c72fb99a770829946fa197268c60685f9d2246864d0b3b870c" name="libreoffice-langpack-cs" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="a19fbbfbeaf7d0fe78c9c2cfdfb3f1b7f4ed51faadb5e92bf760cc7484f54922" name="libreoffice-langpack-cs" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="ac841ab3b140ddf9f34208f1fa57dde95ecbd810c68ed22e6f762d349086359c" name="libreoffice-langpack-cy" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="e455297bb8e9a60c175411e999e494d6578cdea2c36aaaa7d4f7b6137d73ad12" name="libreoffice-langpack-cy" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="bb0e4e8088033a7e98155885687ffc53d90ff567a91d9778709a01a263045105" name="libreoffice-langpack-da" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="fd9e2dde3346f1bd3a4b863552294f9b0c6cada35ed32e06813b481b448b8331" name="libreoffice-langpack-da" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="829c39d5907a3e88f5edc4621f9db5339e6510f9300be979774e75d72c8114a1" name="libreoffice-langpack-de" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="a43c8e98e54b6b5787e77f996dca5f0a141e7e61d73fe2d7d80c4f1c5d45ad19" name="libreoffice-langpack-de" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="74b26ecade420f2b415219a615f4c4e233e686c1300347ba8f4f36e3fff3f45a" name="libreoffice-langpack-dz" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="e7706c50ce552e05b47cde802632d9cb2af8f89cb23d6935c671501da340a69a" name="libreoffice-langpack-dz" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="701e7ced398c00d3b87772cf93ef0913c687aab3e953a91ca8c27b153fc681ad" name="libreoffice-langpack-el" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="75b5279b558de4eae5f1dc57cab1e0f4399ba5ec53af800daacef4f71b3c3c6d" name="libreoffice-langpack-el" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="db09f06fb680c27592f699ceb4ca5a0d21c99b5de077d991ec6f2f7d98d2eca3" name="libreoffice-langpack-en" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="8e2fe95b144e6c376bfa6e9bee2c36340a76b50af665f53a6cd68cc192d0e447" name="libreoffice-langpack-en" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="30d0836156960f4b76b9200dca4f9b86be37e29c2cd0e587ab3969e7f532a543" name="libreoffice-langpack-es" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="17ed26f6f8696f8d67326e9cfb4da3b03ac95a3b673a1ee2b38b996da1bb8725" name="libreoffice-langpack-es" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="4161524c8c9f86d13a10e315ddec786449de100aafa350950d73adfd867f2d9b" name="libreoffice-langpack-et" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="640e8b4a696f6c36b0bbc51f74e9e2aaf9caa008bacffc0ff925518a032210fa" name="libreoffice-langpack-et" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="0262025ff6f64859efd3e84905ac6bc7c03999877d42b648070af7b3fe3f5fe2" name="libreoffice-langpack-eu" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="44a657897e182e99a0d35c16e5a95434811151ae9249848b13f46de4c27ad054" name="libreoffice-langpack-eu" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="3240fe20de78f920fa68b12e2db99eed897b74d3a3d75ec041a5c0f393a1baab" name="libreoffice-langpack-fa" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="fa4d2f771d32fe7a3f8a1c9ef889c18671cf3aa8a949bc76e7fce2f121c2f3f4" name="libreoffice-langpack-fa" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="c072d46a7e4cf9026a51c7abe9f41109e464cf0391161090ff0ebfc99339093e" name="libreoffice-langpack-fi" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="ef955ef303336fe33090b50b4f59759e058ed8981371ff9b9816a39f95a756c4" name="libreoffice-langpack-fi" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="6c0f5f7ff64398fa0e378bec43e24101a491edaa90b5f5844c3bcef0eb215c16" name="libreoffice-langpack-fr" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="da53bf1c720fe98b2a5ef17cfb6f0b81d711c3b731752e7c604b992a99cc1567" name="libreoffice-langpack-fr" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="4b6bf8a9ea08d68b4d22fee14bb778d943a858e6f95b7df45a2e25f0af810de4" name="libreoffice-langpack-ga" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="ad38d588de78d85dfac464be713968e5abafe2b63cc6b46117c2d7d9a08c3ed4" name="libreoffice-langpack-ga" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="94de317f4be764ffbec5dcd05953346d29aa21299f8bccb1867a16b39c624873" name="libreoffice-langpack-gl" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="f907c1150b29ece9a7d1c0583547fa2aa32d41367b9ece64321df9798b32bdcd" name="libreoffice-langpack-gl" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="2c976ebc89aea0c9ac83cbd5f67fa537bedbc78e9986e480ac6d1165ae8f1c5d" name="libreoffice-langpack-gu" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="4146d9bcb4a175d51103f5937d9448a2f016d948676499b08311dd2f2b4491b6" name="libreoffice-langpack-gu" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="4611952d7b6263882e7ebb0b0ce69b92e419f169859fc3c2b65a1ad252530010" name="libreoffice-langpack-he" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="7eea40ee4e843b02753d1058ee31155b9b9527f6b95a799ac82fb60a43472ce5" name="libreoffice-langpack-he" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="445db977c233722d3491f2f3f3749015b9945260e620f4c3d6bd7c414ed1c8a4" name="libreoffice-langpack-hi" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="1afd7788b1b73d159ce1f877326bb12dd609f4e76a329d278cd74cbba45ccd19" name="libreoffice-langpack-hi" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="4fd0f23ee8693038ec13d9d95f0ec61ffff3e37cf289e1a88f76bca7d2e1738b" name="libreoffice-langpack-hr" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="ab435e1887a25998249cf438a0f078fd792b98be3b52352dbeff175b1c21d985" name="libreoffice-langpack-hr" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="eca7957a001b28c4bd094535499f83b25547fb7d0124df8f9c61afa901b5e73e" name="libreoffice-langpack-hu" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="d900adc06fff4ba8fec34cc587b7bae5d77b00652d6f3f13863f619ce7b0b1e3" name="libreoffice-langpack-hu" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="d5fc84692a8208edee022a877675e43214b7bd66162f83be0b61de810380557a" name="libreoffice-langpack-it" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="0b6013da24ae5d641aa2495fa7159f6ef0c62831be068c6f97b79c8ce03d5169" name="libreoffice-langpack-it" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="ac00e1986227a240c03b6757bbc4c738b17c4be516d89eb1f733c1bfa58e5397" name="libreoffice-langpack-ja" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="d88bbd161b996a86fad911b17087cf2321b27bcd0962c6f3ad972ef4c7874ad5" name="libreoffice-langpack-ja" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="92cff78b6c00dd67f998e88a4dbc67cb97a99c913b8431c53223bb90bd106a0a" name="libreoffice-langpack-kk" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="efc0d71cc3364341f3fb801edc7f830195cc7c00c6d475883a9c3064d0098b07" name="libreoffice-langpack-kk" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="a6f4675000d7a4dadda14b1d3ecf57a1d570875752b57934a91b3bba5bad662a" name="libreoffice-langpack-kn" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="9ae1a3a0bf094adfb79ccc72fb1a20207d8f9805cfe48285d2773ba257c7e73b" name="libreoffice-langpack-kn" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="3ca16314a2fbb29ae7c7215ab71ba9d2d2184443cada532a73cadc40bfb9c250" name="libreoffice-langpack-ko" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="692bc0394304480400046c54701003321b0b4f3452cb76e3db8e59bd6414cfa7" name="libreoffice-langpack-ko" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="90226ea0c3873dd281ea4dd6431b93413dd9d31bb52177dbb71b15a735bf9e3a" name="libreoffice-langpack-lt" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="86613fd656f572a02ba63c7a4c82c730eca659263601ad9e683c2ba479f55ebe" name="libreoffice-langpack-lt" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="ade349635c7d5e6d5fc927a417e28763422b70faedddf7a8fdfeee75db5c08f9" name="libreoffice-langpack-lv" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="b646faba0d6533c22268fb28eaffc36fa6aefa3321bdabb47d1decb17e57706b" name="libreoffice-langpack-lv" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="5cd7580f9dd7a36c251a081fd151cd6834f6415d79ba11f0382d1b7a7f044959" name="libreoffice-langpack-mai" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="c4e7fcba903bd0e52637c7112ea1e0e77f6f802b5f05a10fa39364d84591d3dd" name="libreoffice-langpack-mai" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="011496451d1b261f023dc27c6f294924ceeffabe8b7d73e359899c337eca3d9a" name="libreoffice-langpack-ml" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="3a0189b97eeb5928b5e7399681a6e2d38df468b9abf32f2c5e3a0a38987ae4de" name="libreoffice-langpack-ml" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="aea73202cc5220b859499912b4826448af4764f936720cd29b15881d2eb583ba" name="libreoffice-langpack-mr" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="6df2f381b6b0f81422bcd9415610b4fcf99c6e278ccd954534b9ae59a5ef3ef4" name="libreoffice-langpack-mr" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="1e86e87f9c46ccfcd156194590f86ea3543e01d3bd565d620d6b2c00e29fce6f" name="libreoffice-langpack-nb" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="1f1e3b7a4a954502cb2c2e2be11e6d7d661305cc14a185a412434e2d9514b30b" name="libreoffice-langpack-nb" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="263612e2079edba4eab5bee797df6d1ec74e58905e59e314625afd557f8a9759" name="libreoffice-langpack-nl" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="657b075ffbce82978c11899914360fa81d7e079efb974091b420cc036c3a5758" name="libreoffice-langpack-nl" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="6175606b2bae7ebd3da213436408454ea4e0f1492128ef7e0d7bec1a9ec7f7fa" name="libreoffice-langpack-nn" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="c2c4ef9a49b80d0e8036fb95fef621daa8a39580b5d66dad64c5b4977a6973d7" name="libreoffice-langpack-nn" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="e147f57dfb8dbaddf8315dfe99d7c9bd46ab2f57ad968c3decf0751a97658ad8" name="libreoffice-langpack-nr" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="e211bc6c4efd6f63ca5976d5a660dda2fe9211b88b31994607f87039de08fd3d" name="libreoffice-langpack-nr" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="f31661e4064cdb07d60dccd3366cfec1548ed342cb21133b11c7614cfbfddfa6" name="libreoffice-langpack-nso" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="df0fc37d0b7c2b07c6853c2d97012cbe4525d4f052ef15a3f087cb2cc670bd2f" name="libreoffice-langpack-nso" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="1e86cfb8fefa2d0f93e9e7152111e7f353cfcd405c8477c1529288d9efd0419b" name="libreoffice-langpack-or" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="81f7fe907bef6ffe26da69fb8ee24dc0a89daa9d4965944d3b0ebf5980de3e4e" name="libreoffice-langpack-or" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="ece66e2088d6f7ebf0813fd985a7a8d2d2cce02e5979350ddf3b1380e620ed8d" name="libreoffice-langpack-pa" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="86d581fa4b21eeeb606c54ac3cc26f235c77b05ffc4fccb576544e58d83fc41a" name="libreoffice-langpack-pa" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="e0f67c7fd7548e47f235d3fc5ba9c478437674966b0a4dcb0c944b65548dc30f" name="libreoffice-langpack-pl" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="6e6fdb845394d76e784bc4cdd4000fabe013094f96e2436fd4a7fdc4c4462202" name="libreoffice-langpack-pl" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="42a27d661aabcf6cfbefe907b3b414222da464f5a93594ffc7470c1f9c3e4ed0" name="libreoffice-langpack-pt-BR" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="d5f1bf9c106acca4fd0eaa8cce9e40a53eb846131cf5ccca22b4910f337f0c23" name="libreoffice-langpack-pt-BR" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="fbb0eb12a0f16c028d336158e13d76408e310dccf7bff4fb3ad2a1c14ab98916" name="libreoffice-langpack-pt-PT" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="a13397514a05d9a9a1b839b78569739f01b12cc25ce9bd6c8c18363049ce1238" name="libreoffice-langpack-pt-PT" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="7f529ab0e9b0a403e26ae4df9a67873e0fccec459a1b2cfec73958b83cd237b4" name="libreoffice-langpack-ro" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="9aaa2f3c47bc49f3ad5bd73500ca974f45ba83b249d7e6243cd2813afe098c47" name="libreoffice-langpack-ro" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="575bc8b73b397232c4916b6d6dd062c7860e3934370c0c2e5aa7f3c45f0a7e9e" name="libreoffice-langpack-ru" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="f7b0dda52c89f22086d23af2a1944486fba21c09aef80ea81dfcd56faeeb8a21" name="libreoffice-langpack-ru" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="668830760e016837924bf14f5d9baa082cd4b8b8760a4947a977e34d7ed76c3a" name="libreoffice-langpack-si" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="a68279136903029c692b1f0825c4050fb2d400824b1cbde03d722933724a8556" name="libreoffice-langpack-si" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="9c08aa8ab00587a5e6b80077465238653542b5a99af502dac25fb42a9111d1ac" name="libreoffice-langpack-sk" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="b4a75784eb0c5cec2a9ceb1d5dce76a625960abb14125fd2d70a0e8aa8813a82" name="libreoffice-langpack-sk" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="8eb87718fb933cc0e155792dbcf092cefada163bffe4e0a40de81e6f86bae0b7" name="libreoffice-langpack-sl" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="a70c224f1181e14b8277ab8dd1b7b3f96ff10ef78976ff7efa5e0444c23c8f40" name="libreoffice-langpack-sl" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="6e933100bd422900f281698782d4ab19ffc9daedcaa87b891c45dba10fd1f91b" name="libreoffice-langpack-sr" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="e451ed2e3752bc42fcb690ef2fcf74e44f889e05a9301737d103a694b9e1be09" name="libreoffice-langpack-sr" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="5faf1861249ec2985a912c4719df66f6bc07bd24d6180e882488950b0578a38f" name="libreoffice-langpack-ss" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="31bec1c744ef696bc5744b2a37c653a01110491baa31163b61f0875b62cd72d2" name="libreoffice-langpack-ss" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="66d8677b38e062f1c67ffb0157dfa394b94ecd55f9b754f768e45f3be7b22c23" name="libreoffice-langpack-st" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="5ce6b51b3d93c56f14149dd4a7466cbe24a81861687b8d107cfaa1762555c204" name="libreoffice-langpack-st" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="527188b509770afadf57945e43609a62bc4a46f2dc68b8bdf03a9f794988ec9e" name="libreoffice-langpack-sv" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="4b823b405f20df0d3d64b5464e3687ff9d03e4d384946cf6e392196579bd231e" name="libreoffice-langpack-sv" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="47679389d5b2cec33b0f94abe9e9422775cbef9fec96f9fd4deb59c3b3784713" name="libreoffice-langpack-ta" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="6e73e3576d469c5b64f4ca1fd63622770a43ac7af20ed0c5d5204096b824d9e1" name="libreoffice-langpack-ta" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="131187898e4d2fef31f354206438e3d8054c5cddc46cc605dc215e5d4f60f227" name="libreoffice-langpack-te" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="6ed1248213509a096394225d58cb70da58514c14b30a3ea7090b3e0d9286e938" name="libreoffice-langpack-te" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="52b972c105d23096d2266f1373eb779bce354956a8bbebd6e7ee5812292f0339" name="libreoffice-langpack-th" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="30a7d757f7cdd0786805f38f5dc4ed85b3175595516db012e1a771df259d0fae" name="libreoffice-langpack-th" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="86a121c856025c2ce43f1c96cce0b3f87dafefb950478b286663fb4c6d06c581" name="libreoffice-langpack-tn" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="ac1239d5715b6aee1c1f1350686f5df58bc62bd34b73294ce7360528fdbed14d" name="libreoffice-langpack-tn" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="070b2bb3463ca81e68c9745834c68bd44d41a38c46946ab2347cb200fba2646a" name="libreoffice-langpack-tr" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="6b719b7e6b01b1c1ea690a0fe8c16d5da74e8256a297871538c90e2781398741" name="libreoffice-langpack-tr" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="aab5f03d3f8734fa11b87c8c0707bea0b19135241c0e42c615fe891e220c934d" name="libreoffice-langpack-ts" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="cd10b79f9f4f70f1b7604c90ab2f4ceb1fd98d03c7725f8a1eae12c795f0716c" name="libreoffice-langpack-ts" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="e4b9d30f5bad215f7a9ce728b4460d6420338cbe1ececbfb4e7c359a6e144fd2" name="libreoffice-langpack-uk" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="22a03e303929998f1ce542190aae473d9401bebea13baa3713ebcff8f6c8f72e" name="libreoffice-langpack-uk" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="dabdf8bb42359b4b0bf35c8b8a9a790dac43cfa0999206b5d65c1b5773324826" name="libreoffice-langpack-ve" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="8b686476e324282db9b2fc27da746a6ef7088c582dde899919918813d3688882" name="libreoffice-langpack-ve" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="66897c683bba3a732c25b5f86d8be76b57540ee525a75b80f5e32243d72f9e6d" name="libreoffice-langpack-xh" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="3140f5c35c7308d189590ad5b30ff535a3b2e21410e1f4749af4e899b56a9952" name="libreoffice-langpack-xh" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="5c10adf7720fa2d76e820b954611a987bfe102c21d0c0cde194f4248c902ee2d" name="libreoffice-langpack-zh-Hans" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="d35bf6aa345b429e08435fbe42b6d03a8f78e4d6f8c6afc0fc28a0f0fa090ff7" name="libreoffice-langpack-zh-Hans" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="b7ec5f11119c2a85a7f94a2ff1ebbafb3fe88462388156a084cee0ae668b8784" name="libreoffice-langpack-zh-Hant" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="16ded0ca80b81a10ec5ff70c728d220c94100c62067fc691f754a566ec106b46" name="libreoffice-langpack-zh-Hant" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="9c98cf195e576cc1c8aaf0c563b987ac3292ffc02bb6ab3b1b64fbf8abaf0937" name="libreoffice-langpack-zu" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="030eb0170c84ad7f73fff1b674e9d2a83536ec21698991543a7e625e79eb6d16" name="libreoffice-langpack-zu" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="2082e86684edb1ddb8b5883a6e90c222f4e16ed15f3c719ed796916610fe9b40" name="libreoffice-librelogo" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="46f89716a4f8295ec02ce4de138068d3f12d3ae5605e2fed3840ab42999cf96e" name="libreoffice-librelogo" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="5adb713080b69c6a718b60d5c163693bfafef1ad6c88f8eafd7748a6be29a5fe" name="libreoffice-math" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="85cdfe1224ec4a4b92cfc3ae21a5c944dc8131357509f30e134b583f8e7d6558" name="libreoffice-math" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="8054e0b378420fd84302bbfd332fec6b7158dfa21c5783ceaddbb463d9abcdfe" name="libreoffice-nlpsolver" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="f00189fe0e9569eeec20fb8981c55b07926faa22692922d6f8f2866903182fce" name="libreoffice-nlpsolver" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="fe52cae75808505cdcad3403d9c758ad26a6acd4f8e5e87bf41bbe26b4d206dc" name="libreoffice-officebean" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="096dcfed2cd239528f5919153b3de3434199259eb80baa0b1a3489a1836de117" name="libreoffice-officebean" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="1e0d71f603225903019b8ad826dae73f9d22bce878147eb9ec6619c852a16f4a" name="libreoffice-ogltrans" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="f3f0c680dd0e78012e4c4a642aebe9af2fbd792ee0a5b4f7f8bcc5d0fd80fef5" name="libreoffice-ogltrans" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="47a2f1bb0456285b2089a472ede9d554c1eb5aed27e166249d2cebdf4a4bbbd9" name="libreoffice-opensymbol-fonts" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="908c2bbfa708f70a14c9ff1f9f1361ca104af163785af13b9935cc98805f5cbc" name="libreoffice-opensymbol-fonts" arch="noarch">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="c6de072a6690ab75011e3ed5ac0785d55a0751f8bd00fa8e665c7247dc1bfdf8" name="libreoffice-pdfimport" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="7ba8dd939ff5b284096947f9e98efca48dbb91f27bacd2fc84df6071a39bb391" name="libreoffice-pdfimport" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="df94dafefa8f24bf73b51a35e23ec5cd1ad5b73edbb3553338b68084f01bea18" name="libreoffice-postgresql" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="0081d8a8a12e88117cbcb3f54d7113c22225abb745a64379ca2d91d42fe0ccdf" name="libreoffice-postgresql" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="0b8d5f89dc8d6323c2bc48b5e740928c48e34787a44844f5a31f926a9d9cc6ff" name="libreoffice-pyuno" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="2d7e8cf0a269509cdf8658647329cc82517b2bd1dfd234db5dd42f2adcf1e7c6" name="libreoffice-pyuno" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="cc5796a2bb8c9ac59aadd73fd50f852911e598229297052ea6763980ee439d33" name="libreoffice-rhino" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="a5390beb5185fd754bc286de39c655877a98ae5d882451f190f3beefe44b0a26" name="libreoffice-rhino" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="f9aaf061cfe84fa8d34475fbb30a1f34a1a00a97ec6dbb2acafb7d8c760185b0" name="libreoffice-sdk" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="3f515f6d708766bc16a0533d3f59469efa093b255e1f984aa699336c923e87bb" name="libreoffice-sdk" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="0cb9b91e32ca14614fb29f5320f46d22d8cabef640c31ce276f62302790ac20d" name="libreoffice-sdk-doc" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="fe86bd0f7dcb572287d0868687f45ae25b0350f58d0bd343d2845e91b4a63ee8" name="libreoffice-sdk-doc" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="7307a502ef47ea7e777747d86eb46ad2d9d6c1179d944ec735f2f3df8a1d123f" name="libreoffice-ure" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="1a73b05f7b1e51391167b09c9f44922df6e98d9771400acb5346d140cf45259e" name="libreoffice-ure" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="7bbc8244d6ed414c008bd982a6ee87f1116e6edcedffdcf7f5ed6057312b9e7f" name="libreoffice-wiki-publisher" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="b10de3f8a87d63ad5c1218625e43dd1989e34a9cc3cc08f24bc5678de1e6792d" name="libreoffice-wiki-publisher" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="a3d8f9bfd941d9f53dd61adbca10d7b656e7d668b423d1ac7d74a7e30bdd7de1" name="libreoffice-writer" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="8ef7d7057a2be1181fa9882914985c7e41df5c1f49a8ee4e62e5260b29b7c494" name="libreoffice-writer" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="90c1ebdf04aba14fef2a92b48ae68173ebdbc7e2fbde008afea5b56588ddf74b" name="libreoffice-xsltfilter" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="fa3e13e01514a4a788aa6652b4da1a3438b288f7d9dc747fce0a418cbe3c4604" name="libreoffice-xsltfilter" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="447aa3e97d6cf284742d7795ea2b90c67384dbd84d4fbef18cd966c1de60ec6c" name="libreofficekit" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="5f0443868134013ee7be6ea9e41c54f6d8d5c2fdd1cb8ced3307113f11a3de7e" name="libreofficekit" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="321c83e58aa2a985537c8c4beb0a71004baea3241765c8d3ad19aff14bf56b96" name="libreofficekit-devel" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="14a69236cd572e81aff1e50ca735a8d0641de91e9060e2d021520dbea60483e2" name="libreofficekit-devel" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="c6921fec89e613e999bd45ff9da78c95f97b4da5179574003ec0c8dd19b8287a" name="libreswan" arch="i686">
  <version epoch="0" ver="3.20" rel="5.el7_4"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-5" date="1445428800">- Resolves: rhbz#1271811 libreswan FIPS test mistakenly looks for non-existent file hashes</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-6" date="1467720000">- Resolves: rhbz#1283468 keyingtries=0 is broken
- Resolves: rhbz#1297816 When using SHA2 as PRF algorithm, nonce payload is below the RFC minimum size
- Resolves: rhbz#1344567 CVE-2016-5361 libreswan: IKEv1 protocol is vulnerable to DoS amplification attack
- Resolves: rhbz#1313747 ipsec pluto returns zero even if it fails
- Resolves: rhbz#1302778 fips does not check hash of some files (like _import_crl)
- Resolves: rhbz#1278063 Unable to authenticate with PAM for IKEv1 XAUTH
- Resolves: rhbz#1257079 Libreswan doesn't call NetworkManager helper in case of a connection error
- Resolves: rhbz#1272112 ipsec whack man page discrepancies
- Resolves: rhbz#1280449 PAM xauth method does not work with pam_sss
- Resolves: rhbz#1290907 ipsec initnss/checknss custom directory not recognized
- Resolves: rhbz#1309764 ipsec barf does not show pluto log correctly in the output
- Resolves: rhbz#1347735 libreswan needs to check additional CRLs after LDAP CRL distributionpoint fails
- Resolves: rhbz#1219049 Pluto does not handle delete message from responder site in ikev1
- Resolves: rhbz#1276524 [USGv6] IKEv2.EN.R.1.1.3.2 case failed due to response to bad INFORMATIONAL request
- Resolves: rhbz#1315412 ipsec.conf manpage does not contain any mention about crl-strict option
- Resolves: rhbz#1229766 Pluto crashes after stop when I use floating ip address</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-7" date="1470657600">- Resolves: rhbz#1311360  When IKE rekeys, if on a different tunnel, all subsequent attempts to rekey fail
- Resolves: rhbz#1361721 libreswan pluto segfault</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-8" date="1473249600">- Resolves: rhbz#1361721 libreswan pluto segfault [UPDATED]
- Resolves: rhbz#1276524 [USGv6] IKEv2.EN.R.1.1.3.2 case failed due to response to bad INFORMATIONAL request [UPDATED]
- Resolves: rhbz#1309764 ipsec barf [additional man page update and --no-pager]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-0.1.dr3" date="1487592000">- Resolves: rhbz#1399883 rebase libreswan to 3.20</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-1" date="1489492800">- Resolves: rhbz#1399883 rebase libreswan to 3.20 (full release)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-2" date="1492084800">- Resolves: rhbz#1372279 ipsec auto --down CONNECTION returns error for tunnels
- Resolves: rhbz#1444115 FIPS: libreswan must generate RSA keys with a minimal exponent of F4, nor E=3
- Resolves: rhbz#1341353 Allow Preshared Key authentication in FIPS mode for libreswan</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-3" date="1497268800">- Resolves: rhbz#1372279 ipsec auto --down CONNECTION returns error for tunnels [updated]
- Resolves: rhbz#1458227 CAVS test driver does not work in FIPS mode
- Resolves: rhbz#1452672 (new-ksk-libreswan-el7) DNSSEC trust anchor cannot be updated without recompilation</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-4" date="1508414400">- Resolves: rhbz#1501809 libreswan does not establish IKE with xauth enabled but modecfg disabled
- Resolves: rhbz#1503949 xauth password length limited to 64 bytes while XAUTH_MAX_PASS_LENGTH (128)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-5" date="1508846400">- Resolves: rhbz#1503949 [updated - USE_DNSSEC setting was updated]</changelog>
</package>
<package pkgid="e44373485e4aa51d844143ec553a24c8ba81ae0ded6a8c16ff26b1599155224f" name="libreswan" arch="src">
  <version epoch="0" ver="3.20" rel="5.el7_4"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-5" date="1445428800">- Resolves: rhbz#1271811 libreswan FIPS test mistakenly looks for non-existent file hashes</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-6" date="1467720000">- Resolves: rhbz#1283468 keyingtries=0 is broken
- Resolves: rhbz#1297816 When using SHA2 as PRF algorithm, nonce payload is below the RFC minimum size
- Resolves: rhbz#1344567 CVE-2016-5361 libreswan: IKEv1 protocol is vulnerable to DoS amplification attack
- Resolves: rhbz#1313747 ipsec pluto returns zero even if it fails
- Resolves: rhbz#1302778 fips does not check hash of some files (like _import_crl)
- Resolves: rhbz#1278063 Unable to authenticate with PAM for IKEv1 XAUTH
- Resolves: rhbz#1257079 Libreswan doesn't call NetworkManager helper in case of a connection error
- Resolves: rhbz#1272112 ipsec whack man page discrepancies
- Resolves: rhbz#1280449 PAM xauth method does not work with pam_sss
- Resolves: rhbz#1290907 ipsec initnss/checknss custom directory not recognized
- Resolves: rhbz#1309764 ipsec barf does not show pluto log correctly in the output
- Resolves: rhbz#1347735 libreswan needs to check additional CRLs after LDAP CRL distributionpoint fails
- Resolves: rhbz#1219049 Pluto does not handle delete message from responder site in ikev1
- Resolves: rhbz#1276524 [USGv6] IKEv2.EN.R.1.1.3.2 case failed due to response to bad INFORMATIONAL request
- Resolves: rhbz#1315412 ipsec.conf manpage does not contain any mention about crl-strict option
- Resolves: rhbz#1229766 Pluto crashes after stop when I use floating ip address</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-7" date="1470657600">- Resolves: rhbz#1311360  When IKE rekeys, if on a different tunnel, all subsequent attempts to rekey fail
- Resolves: rhbz#1361721 libreswan pluto segfault</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-8" date="1473249600">- Resolves: rhbz#1361721 libreswan pluto segfault [UPDATED]
- Resolves: rhbz#1276524 [USGv6] IKEv2.EN.R.1.1.3.2 case failed due to response to bad INFORMATIONAL request [UPDATED]
- Resolves: rhbz#1309764 ipsec barf [additional man page update and --no-pager]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-0.1.dr3" date="1487592000">- Resolves: rhbz#1399883 rebase libreswan to 3.20</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-1" date="1489492800">- Resolves: rhbz#1399883 rebase libreswan to 3.20 (full release)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-2" date="1492084800">- Resolves: rhbz#1372279 ipsec auto --down CONNECTION returns error for tunnels
- Resolves: rhbz#1444115 FIPS: libreswan must generate RSA keys with a minimal exponent of F4, nor E=3
- Resolves: rhbz#1341353 Allow Preshared Key authentication in FIPS mode for libreswan</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-3" date="1497268800">- Resolves: rhbz#1372279 ipsec auto --down CONNECTION returns error for tunnels [updated]
- Resolves: rhbz#1458227 CAVS test driver does not work in FIPS mode
- Resolves: rhbz#1452672 (new-ksk-libreswan-el7) DNSSEC trust anchor cannot be updated without recompilation</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-4" date="1508414400">- Resolves: rhbz#1501809 libreswan does not establish IKE with xauth enabled but modecfg disabled
- Resolves: rhbz#1503949 xauth password length limited to 64 bytes while XAUTH_MAX_PASS_LENGTH (128)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-5" date="1508846400">- Resolves: rhbz#1503949 [updated - USE_DNSSEC setting was updated]</changelog>
</package>
<package pkgid="327b075db7eceef7833a789f2ab9277e233de6dd9c9ea8f2315f8bb7b9ca275a" name="libreswan" arch="src">
  <version epoch="0" ver="3.20" rel="5.el7_4"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-5" date="1445428800">- Resolves: rhbz#1271811 libreswan FIPS test mistakenly looks for non-existent file hashes</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-6" date="1467720000">- Resolves: rhbz#1283468 keyingtries=0 is broken
- Resolves: rhbz#1297816 When using SHA2 as PRF algorithm, nonce payload is below the RFC minimum size
- Resolves: rhbz#1344567 CVE-2016-5361 libreswan: IKEv1 protocol is vulnerable to DoS amplification attack
- Resolves: rhbz#1313747 ipsec pluto returns zero even if it fails
- Resolves: rhbz#1302778 fips does not check hash of some files (like _import_crl)
- Resolves: rhbz#1278063 Unable to authenticate with PAM for IKEv1 XAUTH
- Resolves: rhbz#1257079 Libreswan doesn't call NetworkManager helper in case of a connection error
- Resolves: rhbz#1272112 ipsec whack man page discrepancies
- Resolves: rhbz#1280449 PAM xauth method does not work with pam_sss
- Resolves: rhbz#1290907 ipsec initnss/checknss custom directory not recognized
- Resolves: rhbz#1309764 ipsec barf does not show pluto log correctly in the output
- Resolves: rhbz#1347735 libreswan needs to check additional CRLs after LDAP CRL distributionpoint fails
- Resolves: rhbz#1219049 Pluto does not handle delete message from responder site in ikev1
- Resolves: rhbz#1276524 [USGv6] IKEv2.EN.R.1.1.3.2 case failed due to response to bad INFORMATIONAL request
- Resolves: rhbz#1315412 ipsec.conf manpage does not contain any mention about crl-strict option
- Resolves: rhbz#1229766 Pluto crashes after stop when I use floating ip address</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-7" date="1470657600">- Resolves: rhbz#1311360  When IKE rekeys, if on a different tunnel, all subsequent attempts to rekey fail
- Resolves: rhbz#1361721 libreswan pluto segfault</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-8" date="1473249600">- Resolves: rhbz#1361721 libreswan pluto segfault [UPDATED]
- Resolves: rhbz#1276524 [USGv6] IKEv2.EN.R.1.1.3.2 case failed due to response to bad INFORMATIONAL request [UPDATED]
- Resolves: rhbz#1309764 ipsec barf [additional man page update and --no-pager]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-0.1.dr3" date="1487592000">- Resolves: rhbz#1399883 rebase libreswan to 3.20</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-1" date="1489492800">- Resolves: rhbz#1399883 rebase libreswan to 3.20 (full release)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-2" date="1492084800">- Resolves: rhbz#1372279 ipsec auto --down CONNECTION returns error for tunnels
- Resolves: rhbz#1444115 FIPS: libreswan must generate RSA keys with a minimal exponent of F4, nor E=3
- Resolves: rhbz#1341353 Allow Preshared Key authentication in FIPS mode for libreswan</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-3" date="1497268800">- Resolves: rhbz#1372279 ipsec auto --down CONNECTION returns error for tunnels [updated]
- Resolves: rhbz#1458227 CAVS test driver does not work in FIPS mode
- Resolves: rhbz#1452672 (new-ksk-libreswan-el7) DNSSEC trust anchor cannot be updated without recompilation</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-4" date="1508414400">- Resolves: rhbz#1501809 libreswan does not establish IKE with xauth enabled but modecfg disabled
- Resolves: rhbz#1503949 xauth password length limited to 64 bytes while XAUTH_MAX_PASS_LENGTH (128)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-5" date="1508846400">- Resolves: rhbz#1503949 [updated - USE_DNSSEC setting was updated]</changelog>
</package>
<package pkgid="87fa2da68bd9d74514dd2c8070c631e0872152e6fe513e539109e48081a9e17a" name="libreswan" arch="x86_64">
  <version epoch="0" ver="3.20" rel="5.el7_4"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-5" date="1445428800">- Resolves: rhbz#1271811 libreswan FIPS test mistakenly looks for non-existent file hashes</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-6" date="1467720000">- Resolves: rhbz#1283468 keyingtries=0 is broken
- Resolves: rhbz#1297816 When using SHA2 as PRF algorithm, nonce payload is below the RFC minimum size
- Resolves: rhbz#1344567 CVE-2016-5361 libreswan: IKEv1 protocol is vulnerable to DoS amplification attack
- Resolves: rhbz#1313747 ipsec pluto returns zero even if it fails
- Resolves: rhbz#1302778 fips does not check hash of some files (like _import_crl)
- Resolves: rhbz#1278063 Unable to authenticate with PAM for IKEv1 XAUTH
- Resolves: rhbz#1257079 Libreswan doesn't call NetworkManager helper in case of a connection error
- Resolves: rhbz#1272112 ipsec whack man page discrepancies
- Resolves: rhbz#1280449 PAM xauth method does not work with pam_sss
- Resolves: rhbz#1290907 ipsec initnss/checknss custom directory not recognized
- Resolves: rhbz#1309764 ipsec barf does not show pluto log correctly in the output
- Resolves: rhbz#1347735 libreswan needs to check additional CRLs after LDAP CRL distributionpoint fails
- Resolves: rhbz#1219049 Pluto does not handle delete message from responder site in ikev1
- Resolves: rhbz#1276524 [USGv6] IKEv2.EN.R.1.1.3.2 case failed due to response to bad INFORMATIONAL request
- Resolves: rhbz#1315412 ipsec.conf manpage does not contain any mention about crl-strict option
- Resolves: rhbz#1229766 Pluto crashes after stop when I use floating ip address</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-7" date="1470657600">- Resolves: rhbz#1311360  When IKE rekeys, if on a different tunnel, all subsequent attempts to rekey fail
- Resolves: rhbz#1361721 libreswan pluto segfault</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-8" date="1473249600">- Resolves: rhbz#1361721 libreswan pluto segfault [UPDATED]
- Resolves: rhbz#1276524 [USGv6] IKEv2.EN.R.1.1.3.2 case failed due to response to bad INFORMATIONAL request [UPDATED]
- Resolves: rhbz#1309764 ipsec barf [additional man page update and --no-pager]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-0.1.dr3" date="1487592000">- Resolves: rhbz#1399883 rebase libreswan to 3.20</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-1" date="1489492800">- Resolves: rhbz#1399883 rebase libreswan to 3.20 (full release)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-2" date="1492084800">- Resolves: rhbz#1372279 ipsec auto --down CONNECTION returns error for tunnels
- Resolves: rhbz#1444115 FIPS: libreswan must generate RSA keys with a minimal exponent of F4, nor E=3
- Resolves: rhbz#1341353 Allow Preshared Key authentication in FIPS mode for libreswan</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-3" date="1497268800">- Resolves: rhbz#1372279 ipsec auto --down CONNECTION returns error for tunnels [updated]
- Resolves: rhbz#1458227 CAVS test driver does not work in FIPS mode
- Resolves: rhbz#1452672 (new-ksk-libreswan-el7) DNSSEC trust anchor cannot be updated without recompilation</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-4" date="1508414400">- Resolves: rhbz#1501809 libreswan does not establish IKE with xauth enabled but modecfg disabled
- Resolves: rhbz#1503949 xauth password length limited to 64 bytes while XAUTH_MAX_PASS_LENGTH (128)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-5" date="1508846400">- Resolves: rhbz#1503949 [updated - USE_DNSSEC setting was updated]</changelog>
</package>
<package pkgid="26d94cd31b586a4023d801c31096e3bbc4747e95df9c454d0aedd899f72f1ec5" name="libreswan-debuginfo" arch="i686">
  <version epoch="0" ver="3.20" rel="5.el7_4"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-5" date="1445428800">- Resolves: rhbz#1271811 libreswan FIPS test mistakenly looks for non-existent file hashes</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-6" date="1467720000">- Resolves: rhbz#1283468 keyingtries=0 is broken
- Resolves: rhbz#1297816 When using SHA2 as PRF algorithm, nonce payload is below the RFC minimum size
- Resolves: rhbz#1344567 CVE-2016-5361 libreswan: IKEv1 protocol is vulnerable to DoS amplification attack
- Resolves: rhbz#1313747 ipsec pluto returns zero even if it fails
- Resolves: rhbz#1302778 fips does not check hash of some files (like _import_crl)
- Resolves: rhbz#1278063 Unable to authenticate with PAM for IKEv1 XAUTH
- Resolves: rhbz#1257079 Libreswan doesn't call NetworkManager helper in case of a connection error
- Resolves: rhbz#1272112 ipsec whack man page discrepancies
- Resolves: rhbz#1280449 PAM xauth method does not work with pam_sss
- Resolves: rhbz#1290907 ipsec initnss/checknss custom directory not recognized
- Resolves: rhbz#1309764 ipsec barf does not show pluto log correctly in the output
- Resolves: rhbz#1347735 libreswan needs to check additional CRLs after LDAP CRL distributionpoint fails
- Resolves: rhbz#1219049 Pluto does not handle delete message from responder site in ikev1
- Resolves: rhbz#1276524 [USGv6] IKEv2.EN.R.1.1.3.2 case failed due to response to bad INFORMATIONAL request
- Resolves: rhbz#1315412 ipsec.conf manpage does not contain any mention about crl-strict option
- Resolves: rhbz#1229766 Pluto crashes after stop when I use floating ip address</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-7" date="1470657600">- Resolves: rhbz#1311360  When IKE rekeys, if on a different tunnel, all subsequent attempts to rekey fail
- Resolves: rhbz#1361721 libreswan pluto segfault</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-8" date="1473249600">- Resolves: rhbz#1361721 libreswan pluto segfault [UPDATED]
- Resolves: rhbz#1276524 [USGv6] IKEv2.EN.R.1.1.3.2 case failed due to response to bad INFORMATIONAL request [UPDATED]
- Resolves: rhbz#1309764 ipsec barf [additional man page update and --no-pager]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-0.1.dr3" date="1487592000">- Resolves: rhbz#1399883 rebase libreswan to 3.20</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-1" date="1489492800">- Resolves: rhbz#1399883 rebase libreswan to 3.20 (full release)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-2" date="1492084800">- Resolves: rhbz#1372279 ipsec auto --down CONNECTION returns error for tunnels
- Resolves: rhbz#1444115 FIPS: libreswan must generate RSA keys with a minimal exponent of F4, nor E=3
- Resolves: rhbz#1341353 Allow Preshared Key authentication in FIPS mode for libreswan</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-3" date="1497268800">- Resolves: rhbz#1372279 ipsec auto --down CONNECTION returns error for tunnels [updated]
- Resolves: rhbz#1458227 CAVS test driver does not work in FIPS mode
- Resolves: rhbz#1452672 (new-ksk-libreswan-el7) DNSSEC trust anchor cannot be updated without recompilation</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-4" date="1508414400">- Resolves: rhbz#1501809 libreswan does not establish IKE with xauth enabled but modecfg disabled
- Resolves: rhbz#1503949 xauth password length limited to 64 bytes while XAUTH_MAX_PASS_LENGTH (128)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-5" date="1508846400">- Resolves: rhbz#1503949 [updated - USE_DNSSEC setting was updated]</changelog>
</package>
<package pkgid="0444ecf58ec00f3892b4be06e8a4013b6ed09550038bb1486e0d5ad799125af9" name="libreswan-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.20" rel="5.el7_4"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-5" date="1445428800">- Resolves: rhbz#1271811 libreswan FIPS test mistakenly looks for non-existent file hashes</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-6" date="1467720000">- Resolves: rhbz#1283468 keyingtries=0 is broken
- Resolves: rhbz#1297816 When using SHA2 as PRF algorithm, nonce payload is below the RFC minimum size
- Resolves: rhbz#1344567 CVE-2016-5361 libreswan: IKEv1 protocol is vulnerable to DoS amplification attack
- Resolves: rhbz#1313747 ipsec pluto returns zero even if it fails
- Resolves: rhbz#1302778 fips does not check hash of some files (like _import_crl)
- Resolves: rhbz#1278063 Unable to authenticate with PAM for IKEv1 XAUTH
- Resolves: rhbz#1257079 Libreswan doesn't call NetworkManager helper in case of a connection error
- Resolves: rhbz#1272112 ipsec whack man page discrepancies
- Resolves: rhbz#1280449 PAM xauth method does not work with pam_sss
- Resolves: rhbz#1290907 ipsec initnss/checknss custom directory not recognized
- Resolves: rhbz#1309764 ipsec barf does not show pluto log correctly in the output
- Resolves: rhbz#1347735 libreswan needs to check additional CRLs after LDAP CRL distributionpoint fails
- Resolves: rhbz#1219049 Pluto does not handle delete message from responder site in ikev1
- Resolves: rhbz#1276524 [USGv6] IKEv2.EN.R.1.1.3.2 case failed due to response to bad INFORMATIONAL request
- Resolves: rhbz#1315412 ipsec.conf manpage does not contain any mention about crl-strict option
- Resolves: rhbz#1229766 Pluto crashes after stop when I use floating ip address</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-7" date="1470657600">- Resolves: rhbz#1311360  When IKE rekeys, if on a different tunnel, all subsequent attempts to rekey fail
- Resolves: rhbz#1361721 libreswan pluto segfault</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-8" date="1473249600">- Resolves: rhbz#1361721 libreswan pluto segfault [UPDATED]
- Resolves: rhbz#1276524 [USGv6] IKEv2.EN.R.1.1.3.2 case failed due to response to bad INFORMATIONAL request [UPDATED]
- Resolves: rhbz#1309764 ipsec barf [additional man page update and --no-pager]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-0.1.dr3" date="1487592000">- Resolves: rhbz#1399883 rebase libreswan to 3.20</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-1" date="1489492800">- Resolves: rhbz#1399883 rebase libreswan to 3.20 (full release)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-2" date="1492084800">- Resolves: rhbz#1372279 ipsec auto --down CONNECTION returns error for tunnels
- Resolves: rhbz#1444115 FIPS: libreswan must generate RSA keys with a minimal exponent of F4, nor E=3
- Resolves: rhbz#1341353 Allow Preshared Key authentication in FIPS mode for libreswan</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-3" date="1497268800">- Resolves: rhbz#1372279 ipsec auto --down CONNECTION returns error for tunnels [updated]
- Resolves: rhbz#1458227 CAVS test driver does not work in FIPS mode
- Resolves: rhbz#1452672 (new-ksk-libreswan-el7) DNSSEC trust anchor cannot be updated without recompilation</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-4" date="1508414400">- Resolves: rhbz#1501809 libreswan does not establish IKE with xauth enabled but modecfg disabled
- Resolves: rhbz#1503949 xauth password length limited to 64 bytes while XAUTH_MAX_PASS_LENGTH (128)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-5" date="1508846400">- Resolves: rhbz#1503949 [updated - USE_DNSSEC setting was updated]</changelog>
</package>
<package pkgid="6a0270d91dff92edf4c0fb2db545d94f46df586d1eaa01c927caa5487bab5db3" name="libsmbclient" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="d98a048f1365b1dfffd36ae63c654cb140b7e80caf0da3365cac31189aa31a74" name="libsmbclient" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="ac1db013d5edbb5759966f26ff6a6bfdcf27113011170f994abc825f8c2920ba" name="libsmbclient" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="e4437a82b8438a78efef1cc308745ec087014e1bcd5ccb1fe1db881f8bb1db69" name="libsmbclient" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="cf291a5b5bf9ce51587c19a4ed1dd339f51434404b50d03e74c014c92921fbfc" name="libsmbclient" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="56722ad33658fc058a7abf0da34808e0c498860fff62c0283b08e5a14896067d" name="libsmbclient" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="0bd0c591f9e20fc6601dbc8bd9c90e8eb330e40a00d5145d9c752fb085788e8d" name="libsmbclient-devel" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="c7c430a01cc70bec9ac5250358306b2ee81f17d27681a1f7d641a8fe12db4551" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="bb3d983c10d1748ab857e2e9fd7932df80b64f47205829597a5245e199cfe8fd" name="libsmbclient-devel" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="8a5a63abfa778ebf99d70ad3738cea74cfb34cbff4e69a3902c90c366c75992e" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="5505c3afff419c6b0227f30f7c2b690fc5d098b30436cefffc9f684b789688b8" name="libsmbclient-devel" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="fbc50b2d7269d893e9803cd849afe360f604d141d141bf01e861fadf8c62036f" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="9a629cd36c9dcc9c72d387d06aa191dfe2f58a86d49d8b375cdc862dd5aa3341" name="libsoup" arch="i686">
  <version epoch="0" ver="2.56.0" rel="4.el7_4"/>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.46.0-3" date="1413720000">- Apply upstream patch to fix a crash in evolution (rh #1097202)</changelog>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.48.1-2" date="1430136000">- Update to 2.48.1
- Resolves: #1174446</changelog>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.48.1-3" date="1432641600">- Fix "make check" when LC_ALL is set (rh #1224989)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-4" date="1460548800">- Update ja.po translation file (rh #1304238)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-5" date="1460548801">- soup_headers_parse: deal with NUL bytes in headers (rh #1302366)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-6" date="1461067200">- NTLM auth failure with latest samba (rh #1328453)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.56.0-1" date="1474286400">- Update to 2.56.0
- Resolves: #1387019</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.56.0-2" date="1493208000">- Add patch to address some of Coverity Scan and clang reported issues</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.56.0-3" date="1498132800">- libsoup stuck on infinite loop for kerberized pages (rh #1439798)</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.56.0-4" date="1502280000">- Fix chunked decoding buffer overrun (CVE-2017-2885) (rh #1479322)</changelog>
</package>
<package pkgid="fcaf8fcaf767d8010b5df82a8eb0d6802c21eedc18e947bd346958349160124d" name="libsoup" arch="src">
  <version epoch="0" ver="2.56.0" rel="4.el7_4"/>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.46.0-3" date="1413720000">- Apply upstream patch to fix a crash in evolution (rh #1097202)</changelog>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.48.1-2" date="1430136000">- Update to 2.48.1
- Resolves: #1174446</changelog>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.48.1-3" date="1432641600">- Fix "make check" when LC_ALL is set (rh #1224989)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-4" date="1460548800">- Update ja.po translation file (rh #1304238)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-5" date="1460548801">- soup_headers_parse: deal with NUL bytes in headers (rh #1302366)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-6" date="1461067200">- NTLM auth failure with latest samba (rh #1328453)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.56.0-1" date="1474286400">- Update to 2.56.0
- Resolves: #1387019</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.56.0-2" date="1493208000">- Add patch to address some of Coverity Scan and clang reported issues</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.56.0-3" date="1498132800">- libsoup stuck on infinite loop for kerberized pages (rh #1439798)</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.56.0-4" date="1502280000">- Fix chunked decoding buffer overrun (CVE-2017-2885) (rh #1479322)</changelog>
</package>
<package pkgid="6a5ed99a84e0d463e71680aad83dd2632d57c71883ad88b6a103afd0b0aa4493" name="libsoup" arch="src">
  <version epoch="0" ver="2.56.0" rel="4.el7_4"/>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.46.0-3" date="1413720000">- Apply upstream patch to fix a crash in evolution (rh #1097202)</changelog>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.48.1-2" date="1430136000">- Update to 2.48.1
- Resolves: #1174446</changelog>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.48.1-3" date="1432641600">- Fix "make check" when LC_ALL is set (rh #1224989)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-4" date="1460548800">- Update ja.po translation file (rh #1304238)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-5" date="1460548801">- soup_headers_parse: deal with NUL bytes in headers (rh #1302366)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-6" date="1461067200">- NTLM auth failure with latest samba (rh #1328453)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.56.0-1" date="1474286400">- Update to 2.56.0
- Resolves: #1387019</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.56.0-2" date="1493208000">- Add patch to address some of Coverity Scan and clang reported issues</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.56.0-3" date="1498132800">- libsoup stuck on infinite loop for kerberized pages (rh #1439798)</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.56.0-4" date="1502280000">- Fix chunked decoding buffer overrun (CVE-2017-2885) (rh #1479322)</changelog>
</package>
<package pkgid="d473ea79070508a9f533eb878c79d7388c9f9aacaeb97fdd070d51db1788d21a" name="libsoup" arch="x86_64">
  <version epoch="0" ver="2.56.0" rel="4.el7_4"/>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.46.0-3" date="1413720000">- Apply upstream patch to fix a crash in evolution (rh #1097202)</changelog>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.48.1-2" date="1430136000">- Update to 2.48.1
- Resolves: #1174446</changelog>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.48.1-3" date="1432641600">- Fix "make check" when LC_ALL is set (rh #1224989)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-4" date="1460548800">- Update ja.po translation file (rh #1304238)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-5" date="1460548801">- soup_headers_parse: deal with NUL bytes in headers (rh #1302366)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-6" date="1461067200">- NTLM auth failure with latest samba (rh #1328453)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.56.0-1" date="1474286400">- Update to 2.56.0
- Resolves: #1387019</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.56.0-2" date="1493208000">- Add patch to address some of Coverity Scan and clang reported issues</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.56.0-3" date="1498132800">- libsoup stuck on infinite loop for kerberized pages (rh #1439798)</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.56.0-4" date="1502280000">- Fix chunked decoding buffer overrun (CVE-2017-2885) (rh #1479322)</changelog>
</package>
<package pkgid="a94ce62aebc607d61ea3cc90d5cf80bdb6fdd6d29927dab38e84fafc6ee993dc" name="libsoup-debuginfo" arch="i686">
  <version epoch="0" ver="2.56.0" rel="4.el7_4"/>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.46.0-3" date="1413720000">- Apply upstream patch to fix a crash in evolution (rh #1097202)</changelog>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.48.1-2" date="1430136000">- Update to 2.48.1
- Resolves: #1174446</changelog>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.48.1-3" date="1432641600">- Fix "make check" when LC_ALL is set (rh #1224989)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-4" date="1460548800">- Update ja.po translation file (rh #1304238)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-5" date="1460548801">- soup_headers_parse: deal with NUL bytes in headers (rh #1302366)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-6" date="1461067200">- NTLM auth failure with latest samba (rh #1328453)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.56.0-1" date="1474286400">- Update to 2.56.0
- Resolves: #1387019</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.56.0-2" date="1493208000">- Add patch to address some of Coverity Scan and clang reported issues</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.56.0-3" date="1498132800">- libsoup stuck on infinite loop for kerberized pages (rh #1439798)</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.56.0-4" date="1502280000">- Fix chunked decoding buffer overrun (CVE-2017-2885) (rh #1479322)</changelog>
</package>
<package pkgid="3cec36b4e1a16438af04f2763b5f5a451d4eb4a845f0557db159f6d3aea031a6" name="libsoup-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.56.0" rel="4.el7_4"/>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.46.0-3" date="1413720000">- Apply upstream patch to fix a crash in evolution (rh #1097202)</changelog>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.48.1-2" date="1430136000">- Update to 2.48.1
- Resolves: #1174446</changelog>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.48.1-3" date="1432641600">- Fix "make check" when LC_ALL is set (rh #1224989)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-4" date="1460548800">- Update ja.po translation file (rh #1304238)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-5" date="1460548801">- soup_headers_parse: deal with NUL bytes in headers (rh #1302366)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-6" date="1461067200">- NTLM auth failure with latest samba (rh #1328453)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.56.0-1" date="1474286400">- Update to 2.56.0
- Resolves: #1387019</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.56.0-2" date="1493208000">- Add patch to address some of Coverity Scan and clang reported issues</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.56.0-3" date="1498132800">- libsoup stuck on infinite loop for kerberized pages (rh #1439798)</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.56.0-4" date="1502280000">- Fix chunked decoding buffer overrun (CVE-2017-2885) (rh #1479322)</changelog>
</package>
<package pkgid="ecdd9a49c202b21ce49807fb873235a51a12c1e35f6dcb11e66507570455ad73" name="libsoup-devel" arch="i686">
  <version epoch="0" ver="2.56.0" rel="4.el7_4"/>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.46.0-3" date="1413720000">- Apply upstream patch to fix a crash in evolution (rh #1097202)</changelog>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.48.1-2" date="1430136000">- Update to 2.48.1
- Resolves: #1174446</changelog>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.48.1-3" date="1432641600">- Fix "make check" when LC_ALL is set (rh #1224989)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-4" date="1460548800">- Update ja.po translation file (rh #1304238)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-5" date="1460548801">- soup_headers_parse: deal with NUL bytes in headers (rh #1302366)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-6" date="1461067200">- NTLM auth failure with latest samba (rh #1328453)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.56.0-1" date="1474286400">- Update to 2.56.0
- Resolves: #1387019</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.56.0-2" date="1493208000">- Add patch to address some of Coverity Scan and clang reported issues</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.56.0-3" date="1498132800">- libsoup stuck on infinite loop for kerberized pages (rh #1439798)</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.56.0-4" date="1502280000">- Fix chunked decoding buffer overrun (CVE-2017-2885) (rh #1479322)</changelog>
</package>
<package pkgid="cb61b2fc2ba02ed3bde71e357168f2e5a697f4a1998be152baae860fb9486f91" name="libsoup-devel" arch="x86_64">
  <version epoch="0" ver="2.56.0" rel="4.el7_4"/>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.46.0-3" date="1413720000">- Apply upstream patch to fix a crash in evolution (rh #1097202)</changelog>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.48.1-2" date="1430136000">- Update to 2.48.1
- Resolves: #1174446</changelog>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.48.1-3" date="1432641600">- Fix "make check" when LC_ALL is set (rh #1224989)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-4" date="1460548800">- Update ja.po translation file (rh #1304238)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-5" date="1460548801">- soup_headers_parse: deal with NUL bytes in headers (rh #1302366)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-6" date="1461067200">- NTLM auth failure with latest samba (rh #1328453)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.56.0-1" date="1474286400">- Update to 2.56.0
- Resolves: #1387019</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.56.0-2" date="1493208000">- Add patch to address some of Coverity Scan and clang reported issues</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.56.0-3" date="1498132800">- libsoup stuck on infinite loop for kerberized pages (rh #1439798)</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.56.0-4" date="1502280000">- Fix chunked decoding buffer overrun (CVE-2017-2885) (rh #1479322)</changelog>
</package>
<package pkgid="9664ddeff5883f4f1354cd581ddd73b6ea4ca541c4702747fe8e7edcc4d8c2b5" name="libsss_autofs" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="c5577285b2a622a25fb06d3432cc3ef870c30d663315389c1c5bee19b450466a" name="libsss_autofs" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="e427facf19b7f5597085c00193186678e34a244dc1a8d8846e921c9f0d3a60b4" name="libsss_autofs" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="3be53d85c38c95a0efb64e8194ca1b00382539879e6b4bffc55f225a89b0a154" name="libsss_autofs" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="89c1bc21856d1bca87930da477fdf26bdbcbd0aa3d230e65a5d5b77cd611bd58" name="libsss_autofs" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="a01d0972b721c5f13d8893cb73e1fbd07c8ac14f81d9785ff161acee2ddec993" name="libsss_autofs" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="5cb029e935f4693907c1b2e1a8b324e752ce1c94fba428ca44c59bbd25e0379b" name="libsss_autofs" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="1e6033501184ad8654ae5ddc2663f7632f22ba8db9758e582011e6faa0bed1f9" name="libsss_autofs" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="c92d4afb29b0e30fb6dd352f5d252d3349566d63120f974653e03ca259533e88" name="libsss_certmap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="ac489b6f1900e1d023e6fb11384bdd78f43fea03b2a20083bd47c289c2b74fd5" name="libsss_certmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="6704d37bbacfe61eda7c3742630210c07fdc759b83c28a7ebb7b23eb86c34e9f" name="libsss_certmap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="da1fd1321eb637c250ca72544603d1386bc838403e5a9abfae55c4656e521981" name="libsss_certmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="134fbf705e64a1a82f333d9a2f10caf41e642467afe2213ca28734a9bd440e46" name="libsss_certmap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="c0fb11b11cda32d01c25fc68cd27641c3b3921903af829cd83ff5518290dddf4" name="libsss_certmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="89e42924e242cc523163c3afa38212cfef79ef1b1f99266ee36a3743f9b50b7f" name="libsss_certmap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="525ad310bd36837e753c563b39d4cd0e4ab3e56dbb19fbaa2858656e7233ae0d" name="libsss_certmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="b3647c38d0f76cb4eea08b001b4ee8eeb650a84697d0fbfc86003156dbb6ed1b" name="libsss_certmap-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="bc043330d973fbd02e6a7c7b0c9bed6137270e413b852bb3759b6beb6e4ec957" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="a22027a31cbde22dd5c72d85e30e475202d7d83e35ef228f58c7b073e98ee0ef" name="libsss_certmap-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="7623090eb1cc51b4c9962fb1a03c965a3e348eae4f73eb834e6ffa9d3486c222" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="7c6ff596b4fbcc835ad98948e4b79ce8d1f1b495645bdadd307d7acf69ebdb25" name="libsss_certmap-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="79b1373a37b414446881b14155d63148f28b807da0dae459cd1942341d4fe1e3" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="6d3028ce5641b9e4fd80cc271ba2bd569b86299fe972b934c2cdbe8fbf1cf931" name="libsss_certmap-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="2c2db16a994a6dd0ff0ee486f5868534a53ff96d448be9e051e3ae7bf4606f8e" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="06dec0b15bb5cb4967738f84a3bded226ff6133c40640f18d48920a42b491b35" name="libsss_idmap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="bb1e15fe704e4ad022354b9ec1ecef2143a90f6f4f86943dbac1a021139131ae" name="libsss_idmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="bcf410f326cd1a720bd16e33a2bcc475a8b14c01431c7bd972e3d853fbe86db0" name="libsss_idmap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="9c7ecf01598d7e225fb206c6b2655311d949c4b95dc6662955af44ea03509f66" name="libsss_idmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="438b59495008f798745d08ae571bb59853d0f0977bdf25e9b91c2c20f4356d49" name="libsss_idmap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="6e70405732b52c7cd5cb462e505fa259bee455b0d7580d112874c774a7adde7c" name="libsss_idmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="fd4e4a4c49f6bb4080425e4409d5bd045158a7673b1e1674fcf0b203def437e6" name="libsss_idmap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="8b538e2ced1ed8823fb2c92fa389b4a73b9518baafd154c13c3be4b697b24369" name="libsss_idmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="382d0537ab69abadb48e1ebdfceff2f354872b9254a606911e6947670ea294d1" name="libsss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="6fa4abc20253fba6f49d5d751e646dd5a0714ca10887e6ed1abe7e3443736297" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="686ca69e54b245fa8ffcbcbad173a28b530ffbff750c07662107b86d13bdbfdb" name="libsss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="f2a874dd9c631d0ec347f15e3d1bcf30e647a8c1f6025ce81a89ce1e0986819c" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="d6ae71abfeed9b58d8f8b73f5c2a5d7b5824aa83cd7531a84b019671b29a9d85" name="libsss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="9736f9bcf02abdc161ebb8d98396ed06615d2c30143195e067450e49c2b00301" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="50b1ba432b5c2057ab9bf7bd7ea535b1b12eec70275c90d459c7b082844c7c44" name="libsss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="6cd25560384c591595e1213ce03c3de4388e42677674abb8fc73a3ea460ebbb1" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="2386b55c2da380de71631a3d8626c2daa65cc8fcb07a97e0b439120925ca38dd" name="libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="4647e6540ca31f8a833fc490c63aa92b13528b1a715c75232e441aa6b137d2ab" name="libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="9565fb74b5ba9553071e34e619dbd1b8c0c62f5f0d2e9b531c3584739ba1fa39" name="libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="9649b4ec6a473870a702920ee934079d017e0b4eec188569cd94d0e0d892387a" name="libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="cfd0e37077f7dd264ddd8773f4a254a53538bdedd33a1378ad44588445e740a1" name="libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="181c9a0cff52692130e7875e5a001f10cf2e2994b1d677d9a667a230f2578f23" name="libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="e8d9a00f28e4bbeb4f4c87067f61665c24ff9d4062cce8226743b7fa018214ae" name="libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="34fd9abd7167e45be4e586d5fdd58a8262b34d2abd7743f4fa785c9bf3c228ba" name="libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="d3ff01c820e4ab6baa38883ce43a0d83ccd36f33ad3899010caeb7c495df0247" name="libsss_nss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="8658e21331cf6d4e3c0f629a5eee3a3106a4bdf8ef213d0b553c7a0c52ff17cb" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="95534574b7878ac09f03d9c73907d59f5a57005d7b90cbb30622053cfcfb61c0" name="libsss_nss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="d0088785187cfbd0042d58479f82af2a53023e41aff62896e72fbbb8308f2279" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="165dd654e7e11b9125b0f1039859e07eae86d84d3c09746d4f54e058a1e3cca0" name="libsss_nss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="f62aecd401fb21c497bfeea87969c442377b55265a5ea1034091679bd273e8fa" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="196483df0fd29b93adafc14d36add91154dbf8f00e529db7d8e1bccd0e6d95e2" name="libsss_nss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="8f6f8a6fe9b22634fc4d8ba40934e93d215a3b6d62d193c51b20ed944d75a207" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="35f24b0fd1efadcc7edfd65dd74e1d042dd4b7addf8c031fa4d1d993cdbc1ae5" name="libsss_simpleifp" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="087895ecf31016b6ae62c2c53c53c748936801d80f8242d14b8dc4afdea159f1" name="libsss_simpleifp" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="c83bc3f05365b5756fc6984d07b2107e98605e86a45b1ccf7408d90d0160ef73" name="libsss_simpleifp" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="f1d5f309342505a1d16106de5b84e69a1798be7592bc8c1245ed1a0c013b28d2" name="libsss_simpleifp" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="96aea50c8bcd413bbb7474d36cf730b2698fd176527c48e0a0c5b5bae41c9a5e" name="libsss_simpleifp" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="6e04bb59752c54a98ea2be251e780570be41b29ae3f44d3d63ae659a86dc29fc" name="libsss_simpleifp" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="58ca18306684640b19fe3d7d531ceae4e622f7054d9cd00e5aaa02ad6ce14dc6" name="libsss_simpleifp" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="f08e345544b1fb716dd29a09ee96adac6923c3ce668369c0060fb6fe1092d218" name="libsss_simpleifp" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="e52c35edfd7ecb609ceabcbec6b807b6e8afdfe98d0ebe4e9c9eb946da389dff" name="libsss_simpleifp-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="873d0e1140c10d0b9ec2a8a4fdd286c10496ce2338523936be60b6102d03b725" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="ffb75a4347051aa74d8c84eed8bc2e5fc862c588a9c29974a90641a114d6eedf" name="libsss_simpleifp-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="aa424b3217d91c66a6795b05521ee92640f0c6b0ea28d2f2495954c6a6c2c00f" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="74b114cae20d2df2214781271207c2a4c2ba50d14339474d97e2153c6a7c8234" name="libsss_simpleifp-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="34e8eed2df0e43617841c467c853061a49f4c81c8cfa82c70c25ce1903faccee" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="3e55398c2092fd67778f87eb3f55b9e6f97225cb2eff0d3c8f8d99cebbf7da59" name="libsss_simpleifp-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="ddd9806c374551dbca225cc496281ad50c6af8cfa3589b3c6418741054322fbf" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="9a020f8f2bcd5b8fd0ab3616c4aec12f1b50ca9bc8f29300c40d73f1f06e442d" name="libsss_sudo" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="b4b0cfcf8785f43cf903e4f07a992b8405921a979d9c0d4505ef902ed01a5140" name="libsss_sudo" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="90e5821a56dcb9f277d97c61496c06dbe313890c34abb5a6ce1d04637df97bc1" name="libsss_sudo" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="6e9496d5b45b0ebac762542692df31d5817e942d399566ddcc5e90f24052b460" name="libsss_sudo" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="0f01fdd4d83aea4c3b71c19cf03adb7e4d7af34c8ad28d45c35b7f7163896f84" name="libsss_sudo" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="f93e313b502ef3ec99b085b97b7091b11b6ef2e53128fb489da0dab46704ca68" name="libsss_sudo" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="b9564de79d054276dc39b221fca64ad1572d73b7a1f24e49cf072b0731f89a2f" name="libsss_sudo" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="934e6c03500e8b85e49b5954d7865c1f3e0aa0d26b9b5e75004588b35549e01c" name="libsss_sudo" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="b86dafd7ebe0352f05380ec1356503975353e1195c0cfecc780a4a395ca7720e" name="libstdc++" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="7d6883a06b7149e4c011254a27e4dd82c580367670efd74720ce79f2b77d0d61" name="libstdc++" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="a92c037142211d3ad6b8249237deaa0c5c5c54f67245766c22bdf5443b80ef10" name="libstdc++" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="c20fe1cb98754f74f8c51ada037ee9900387544e2759adc58f40352252029dd5" name="libstdc++" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="7275466384579abc33d10bd406e1ca2b060e91aa7b2a46cb8edaab5f55780d10" name="libstdc++-devel" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="99097a01822df9b124c5fffdcf1c238ddf0257a1e3f559dbfe9141de64bcc652" name="libstdc++-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="2108cee252bf73243521164f17fe7c92e0fb9c80e500814bc28cad8f1443aa60" name="libstdc++-devel" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="59c9e9c5a45089e367dbf008ac98dff298f345a312dbab13d567c5391156e24e" name="libstdc++-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="7696697bd08585b04cdf38ce5fed69c1f7e25c3e0e07d43f4ea3561f8b73eba9" name="libstdc++-docs" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="6ac06d862001e41d1e9ef9fc56c7d71068fd57cf9f4fdd0b79a33232a472bd38" name="libstdc++-docs" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="84bb09c4ade29f29151dc054d63858a6711f76fb637643d91569f5362efd4111" name="libstdc++-docs" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="74312962e891d9c9c799371fb886cdcdd293c921b046b55af06a1ed099ff28d5" name="libstdc++-docs" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="8b74c0c8bf920c89097dcfd6adbdbf4ac1edae19174b304dfca26541ef07fcea" name="libstdc++-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="d5f8c5582e144c3e709f952d2af34f6f69e6a46e2c255a81dffd2f4dc0cb7bb5" name="libstdc++-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="be18cbec7c9b82c5f872a0345b9ce62042b387a9add2d920938f5b0cfddb7406" name="libstdc++-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="d488e2a1c23be77790c5d0cef69893ca287a95a9fdff103d81f89498aded0b1a" name="libstdc++-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="ab67de4a734ab817b8526999876a2ee1a40eeb9e09f7113a5258fcf32acd3c55" name="libstoragemgmt" arch="i686">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="b58bafd3a36e8c815136a41ddb8b55269ceab6126a5e4e94915c0bc76f110f74" name="libstoragemgmt" arch="src">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="9f7589ff6b81e2858648072d0614baeb9f8a4dee6d1510d23975c5b02d8b593b" name="libstoragemgmt" arch="src">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="3ff7dd4d2fdfaa29a8a50161e4c08693514c2b3303f5e44d981da8ef2102ee28" name="libstoragemgmt" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="f8c70fe90ca5941857dd270cceafcd94baaf7082ff15f604fef3656f4685cb44" name="libstoragemgmt-debuginfo" arch="i686">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="1faabf21d81a8d2fa65a596aaff6e268d51184983ead86e1bcc308a070ca462d" name="libstoragemgmt-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="003c037e9e2d5a2d7811948e1fb55b4bcaf14a0393c82d38e7c4942265a49430" name="libstoragemgmt-devel" arch="i686">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="46cbc3a8126a8873b2f0b558958711170d6d039fc19aa1b3c06fdd3331b95bab" name="libstoragemgmt-devel" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="63916e5aa48e44286e13614519a9979a11e41eff72ed7b191c78f956bf049027" name="libstoragemgmt-hpsa-plugin" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="bf2f2ecfb4914c44092c3c8925095b22d786dfc69dc1e91e4df928eba1fe0c18" name="libstoragemgmt-hpsa-plugin" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="865826ba3950c4d3ae9b918979691e327ab571f29b6c60a93fcee81847defa7d" name="libstoragemgmt-megaraid-plugin" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="1aeeeec1c7e122b11f4ffa860b40c4ede5542725cfe3f69fbc86cf362c66b6c1" name="libstoragemgmt-megaraid-plugin" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="a97987e60be02d1d9e790a6e6b59e0094dbd030366ca98a88bdb1b6f4ba76ec2" name="libstoragemgmt-netapp-plugin" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="fdd60a93ac46184ae84e8d82b93b4ea1870d9b7213506e5e0a0ca06061e42fb7" name="libstoragemgmt-netapp-plugin" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="321d8c5f5aafa006b3bdb4c8b9949d2235dedbeaa0d0f670c73ca915586b6070" name="libstoragemgmt-nstor-plugin" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="812cb8f054fa065ee7de82f3e6e281729afd97413f4802a820f1b9599e95326f" name="libstoragemgmt-nstor-plugin" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="abc1a47518ee3af4ff4d506b40506a5603891635902a064019ed7d57a4b3ed82" name="libstoragemgmt-python" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="fb78c547213f693d6d036c6f3c6916cf8bb11f6201c612d8e924f6443b6f4f04" name="libstoragemgmt-python" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="d48787ccd304137f26f06daf6e34cd874070d154588531434db387c44141a54e" name="libstoragemgmt-python-clibs" arch="i686">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="658d55bec4d04b85c20c2c1e5af1a9ac577ad9870fa6d0584d29719bfb98ab72" name="libstoragemgmt-python-clibs" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="03750f4b8e5035b184e4966a57f827e2a9703be79fa7618f2baa37fa1a204d66" name="libstoragemgmt-smis-plugin" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="9170650a416fd558bfcff5b91e719afa760132e11dfaa6bae6d7f95c1420e1c1" name="libstoragemgmt-smis-plugin" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="1a2aa4055374a9f62a7cf729a7befd341dd96c1b123487d385f30062b6c6cdb8" name="libstoragemgmt-targetd-plugin" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="e18d6826e49d0dfba88e89c1b9b4bea19d961d690a33b30f9a0019cd6b869195" name="libstoragemgmt-targetd-plugin" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="e62ec02a67a7d52be57963534686df8637ec3635536da7fbf7cb8e252bcb64cc" name="libstoragemgmt-udev" arch="i686">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="9e47893f03553a4661cc9ae4fa473cc5bc1d60e6525f27c234929ab12af7fcd6" name="libstoragemgmt-udev" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="bc55f29f6cbc5842c5103799c2dd6a601cd1b57bafabf102ee6fdd895d3d9ce0" name="libteam" arch="i686">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="553231da22dbbef1b2f5b6a091c2ec2f442bd92a2587a59598a8f02b2f0392f1" name="libteam" arch="src">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="5bb4031041e6296242cfa42f26394f7c4e5c463983dd9c675670914af2d17d22" name="libteam" arch="src">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="0dbede71cc34381c8be3b2d2ddf675db1dbd4899c12666059776ffb34fd163fb" name="libteam" arch="x86_64">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="3adec3663c80c26961f5e68962c531a97616298867f8ab765eeeacb83e2ce33d" name="libteam-debuginfo" arch="i686">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="ab98bfa10074b023919def3be30e84d5e200b50f67927a84cd5f84594ec93508" name="libteam-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="0a6f5de71fdabf42dfb151ab9e127386e79b050a1f153facd018b9d6686fa02b" name="libteam-devel" arch="i686">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="d337396ef1b1ed31e1d8f30bc09fc14fb7e6618c325f1deff632e78bd2c1d36b" name="libteam-devel" arch="x86_64">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="40e0a5d937a9d5fa0574b0c79023dbf6342dfb32e1f27cb0fcb3ead93ab88bd6" name="libteam-doc" arch="i686">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="08463f5e92cb7e26bc2b990e8094177307a21c3676ae9c47b03dbdf127f3d920" name="libteam-doc" arch="x86_64">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="5452ecc976e6f0e2f4cdd6db0dcaa355f4c5edc1c1a9e3e1a247f22d3567454d" name="libtevent" arch="i686">
  <version epoch="0" ver="0.9.31" rel="2.el7_4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-1" date="1409832000">- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer
- removes upstreamed patches</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-2" date="1416830400">- Allow building with RHEL-7.0 libtalloc
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-3" date="1416830401">- BuildRequire the minimal applicable libtalloc version
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.24-1" date="1433332800">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.25-1" date="1434283200">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-1" date="1459512000">- Rebase libtevent to 0.9.26
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-2" date="1459771200">- Resolves: #1309439 - libtevent leaks memory during signal handling</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.28-1" date="1465473600">- Resolves: #1320247 - Rebase libtevent to version 0.9.28</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-1" date="1487073600">- Resolves: #1393812 - Rebase libtevent in RHEL-7.4 to version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-2" date="1487073601">- Resolves: #1513984 - tevent can cause a Samba file corruption bug under
                       heavy threaded load [rhel-7.4.z]</changelog>
</package>
<package pkgid="2c77e4fa85e8b9be09b64e82e78e467eaca477b4a91fe347a7fbb9f2fcd04151" name="libtevent" arch="src">
  <version epoch="0" ver="0.9.31" rel="2.el7_4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-1" date="1409832000">- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer
- removes upstreamed patches</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-2" date="1416830400">- Allow building with RHEL-7.0 libtalloc
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-3" date="1416830401">- BuildRequire the minimal applicable libtalloc version
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.24-1" date="1433332800">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.25-1" date="1434283200">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-1" date="1459512000">- Rebase libtevent to 0.9.26
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-2" date="1459771200">- Resolves: #1309439 - libtevent leaks memory during signal handling</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.28-1" date="1465473600">- Resolves: #1320247 - Rebase libtevent to version 0.9.28</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-1" date="1487073600">- Resolves: #1393812 - Rebase libtevent in RHEL-7.4 to version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-2" date="1487073601">- Resolves: #1513984 - tevent can cause a Samba file corruption bug under
                       heavy threaded load [rhel-7.4.z]</changelog>
</package>
<package pkgid="a242ed7d2fe09cd1a812a3695cbd9a4232cb4a0b87fb02d52a0442a526327a6c" name="libtevent" arch="src">
  <version epoch="0" ver="0.9.31" rel="2.el7_4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-1" date="1409832000">- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer
- removes upstreamed patches</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-2" date="1416830400">- Allow building with RHEL-7.0 libtalloc
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-3" date="1416830401">- BuildRequire the minimal applicable libtalloc version
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.24-1" date="1433332800">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.25-1" date="1434283200">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-1" date="1459512000">- Rebase libtevent to 0.9.26
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-2" date="1459771200">- Resolves: #1309439 - libtevent leaks memory during signal handling</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.28-1" date="1465473600">- Resolves: #1320247 - Rebase libtevent to version 0.9.28</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-1" date="1487073600">- Resolves: #1393812 - Rebase libtevent in RHEL-7.4 to version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-2" date="1487073601">- Resolves: #1513984 - tevent can cause a Samba file corruption bug under
                       heavy threaded load [rhel-7.4.z]</changelog>
</package>
<package pkgid="995d858c5687b4d171c957ff24abd1ef4358619860e65bbc7c8ce217cc886e41" name="libtevent" arch="x86_64">
  <version epoch="0" ver="0.9.31" rel="2.el7_4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-1" date="1409832000">- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer
- removes upstreamed patches</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-2" date="1416830400">- Allow building with RHEL-7.0 libtalloc
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-3" date="1416830401">- BuildRequire the minimal applicable libtalloc version
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.24-1" date="1433332800">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.25-1" date="1434283200">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-1" date="1459512000">- Rebase libtevent to 0.9.26
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-2" date="1459771200">- Resolves: #1309439 - libtevent leaks memory during signal handling</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.28-1" date="1465473600">- Resolves: #1320247 - Rebase libtevent to version 0.9.28</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-1" date="1487073600">- Resolves: #1393812 - Rebase libtevent in RHEL-7.4 to version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-2" date="1487073601">- Resolves: #1513984 - tevent can cause a Samba file corruption bug under
                       heavy threaded load [rhel-7.4.z]</changelog>
</package>
<package pkgid="0c9432379fc132a27eaea21b4c95b8b7d81271863fb9014c958730a631bf7133" name="libtevent-debuginfo" arch="i686">
  <version epoch="0" ver="0.9.31" rel="2.el7_4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-1" date="1409832000">- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer
- removes upstreamed patches</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-2" date="1416830400">- Allow building with RHEL-7.0 libtalloc
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-3" date="1416830401">- BuildRequire the minimal applicable libtalloc version
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.24-1" date="1433332800">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.25-1" date="1434283200">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-1" date="1459512000">- Rebase libtevent to 0.9.26
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-2" date="1459771200">- Resolves: #1309439 - libtevent leaks memory during signal handling</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.28-1" date="1465473600">- Resolves: #1320247 - Rebase libtevent to version 0.9.28</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-1" date="1487073600">- Resolves: #1393812 - Rebase libtevent in RHEL-7.4 to version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-2" date="1487073601">- Resolves: #1513984 - tevent can cause a Samba file corruption bug under
                       heavy threaded load [rhel-7.4.z]</changelog>
</package>
<package pkgid="5f014a057760ed04bcc2b36b87477b0f54120c927301067a3ecc5d6265c76879" name="libtevent-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.9.31" rel="2.el7_4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-1" date="1409832000">- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer
- removes upstreamed patches</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-2" date="1416830400">- Allow building with RHEL-7.0 libtalloc
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-3" date="1416830401">- BuildRequire the minimal applicable libtalloc version
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.24-1" date="1433332800">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.25-1" date="1434283200">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-1" date="1459512000">- Rebase libtevent to 0.9.26
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-2" date="1459771200">- Resolves: #1309439 - libtevent leaks memory during signal handling</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.28-1" date="1465473600">- Resolves: #1320247 - Rebase libtevent to version 0.9.28</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-1" date="1487073600">- Resolves: #1393812 - Rebase libtevent in RHEL-7.4 to version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-2" date="1487073601">- Resolves: #1513984 - tevent can cause a Samba file corruption bug under
                       heavy threaded load [rhel-7.4.z]</changelog>
</package>
<package pkgid="9e74dd4113149570977fdd46154f05b21f6b0baec3d06f3f3ac741e5202bd36d" name="libtevent-devel" arch="i686">
  <version epoch="0" ver="0.9.31" rel="2.el7_4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-1" date="1409832000">- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer
- removes upstreamed patches</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-2" date="1416830400">- Allow building with RHEL-7.0 libtalloc
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-3" date="1416830401">- BuildRequire the minimal applicable libtalloc version
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.24-1" date="1433332800">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.25-1" date="1434283200">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-1" date="1459512000">- Rebase libtevent to 0.9.26
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-2" date="1459771200">- Resolves: #1309439 - libtevent leaks memory during signal handling</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.28-1" date="1465473600">- Resolves: #1320247 - Rebase libtevent to version 0.9.28</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-1" date="1487073600">- Resolves: #1393812 - Rebase libtevent in RHEL-7.4 to version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-2" date="1487073601">- Resolves: #1513984 - tevent can cause a Samba file corruption bug under
                       heavy threaded load [rhel-7.4.z]</changelog>
</package>
<package pkgid="014a033a91eac0f359c91944156d41123a4d60d5ce994159cff61be0a2b2ebb2" name="libtevent-devel" arch="x86_64">
  <version epoch="0" ver="0.9.31" rel="2.el7_4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-1" date="1409832000">- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer
- removes upstreamed patches</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-2" date="1416830400">- Allow building with RHEL-7.0 libtalloc
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-3" date="1416830401">- BuildRequire the minimal applicable libtalloc version
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.24-1" date="1433332800">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.25-1" date="1434283200">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-1" date="1459512000">- Rebase libtevent to 0.9.26
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-2" date="1459771200">- Resolves: #1309439 - libtevent leaks memory during signal handling</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.28-1" date="1465473600">- Resolves: #1320247 - Rebase libtevent to version 0.9.28</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-1" date="1487073600">- Resolves: #1393812 - Rebase libtevent in RHEL-7.4 to version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-2" date="1487073601">- Resolves: #1513984 - tevent can cause a Samba file corruption bug under
                       heavy threaded load [rhel-7.4.z]</changelog>
</package>
<package pkgid="f6acaf753582e8e56c0279751cf537f50921c68d5e7b84e8987eb819870f0ce2" name="libtsan" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="cf16728f57bdfb97c3773ee9a7855f08407b7ae95fe0b71a527b13b73c20550a" name="libtsan" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="e02f0efcab5d89ded15700e39d1cfb8d484e22e83573ebaaaee358636404abaa" name="libtsan-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="2f219841117d629f2fa3af15ffb0d934175475cd562b8c01bb8c70659c3eeb2b" name="libtsan-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="0e272494c2c0fd3be5b905801ac20e3ddd1ba7c068cd287b1a2183d199a5dcdc" name="libuuid" arch="i686">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="df6faae7397e3a59bcb2d6fe201c0696e5242e76a4266dc2abe8a5461c129fef" name="libuuid" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="88a7928797bddcabfb6741966189b8d5d2848804947933c2757519568976f7f7" name="libuuid-devel" arch="i686">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="917a840b422727f092906dd2fc7244df3ad837361a2c34cdde924e7defdcd955" name="libuuid-devel" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="fcc9a14e82005a2f56c8edf1c9a5a4ab0d6507c55606600109a493f0572832cc" name="libvirt" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="84c3744389a34d1b200fa28fffc6b3f5627f93034737a7ebec8653cd924bbf20" name="libvirt" arch="src">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="928e0520534a91ae4b5894f87cffccfcbe1d28853621e7db8c5c71aac9ff94d4" name="libvirt" arch="src">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="3007e84dbab8a77cb830bad776678f4066fdd58ddd1b05e2acd2c8bc250e29a0" name="libvirt" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="5b2cbe71eead77039541646e565c33ec9c9138ae9dc3826eb9505f955a515ec8" name="libvirt" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="8cb173ef09f7d32d29967b9597ccfb7decccd7a20675d267461c86364a7ca503" name="libvirt" arch="src">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="04be1559c7b130525f7b67618453ff31e9e067cb8b7834f5ae35f88653dce5eb" name="libvirt" arch="src">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="17ad3a6a39d43231226421acf7ee68d628eb2a196ae49145a30c7d2fd607abbc" name="libvirt" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="3b7f449e8ce7adfa4bce2b924b56e2cc7372c5a201fc3db0d564361e11697f12" name="libvirt" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="9909d987f12a50ec8f7ed0c1d247d162dd6b5d0bec09a0c2b838a7a904e421e6" name="libvirt" arch="src">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="b0dce0c47f5bbfb3c08564aba71c55fd29553467549ae8bcbbe6cb26e7550d70" name="libvirt" arch="src">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="f51a07f4ecf803562a588108edf45989aeb72ba6ba430191e8055d090f0b0782" name="libvirt" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="32bab69147d4bbee0f759352e5210b868427ec5d3e9f2a12a60c698f0e319611" name="libvirt" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="5c477f153b1bc4eca932462847679f23d59a1eaba105d4a2b626ef3a7ef750ae" name="libvirt" arch="src">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="27705427aacff8821340bfd87283265192986ade0860d508f254cd02d9413180" name="libvirt" arch="src">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="11b72180f9c4d6f2a231fac4be1079c566fa9ed2746fa9f82ca4dc86bc438ca7" name="libvirt" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="925491f148bb6dff3e52e643172e00855e5e349627cc611cdd37668354368e51" name="libvirt" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="62682ee07e5a1f2a6cdb96448b3eb6f55f7c4c564d030ce9775c43fb616216b5" name="libvirt" arch="src">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="99a7b0e43dfec24a00092e01499d695f1e3d67062686b6f87eca639e245c4ec7" name="libvirt" arch="src">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="978d142b75e68b07c6b68e73e2893f392e07ad0a15eddda6b24de873314daabb" name="libvirt" arch="src">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="a5c8dc983ea560c4981002ba2fb9e3a0015cfa5f7aad714110b76938e1aea8bd" name="libvirt" arch="src">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="98082db8f7119b163f1b10b1ed4908b810a5d4a2a1ee9a5726976f0cc8a0f2c9" name="libvirt" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="c78d418e9530194a62d0a361f5bae73b4bc6f9e86039b07c6faa9e10a1557d6b" name="libvirt" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="0f1b45c121ba5cdf9295d0e5ad06f13f65f82d589999f22b23dfd620b0dc04c8" name="libvirt" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="ca9996ada7e19e8d2b66a5bfa431463941d348855bca1c33182f8bbd47adf5d2" name="libvirt" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="25e9d425c90f5eb6e23ff5a1236b1680664df610ca991c7528a508b27ed23921" name="libvirt" arch="src">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="75f580ece0c37a2749a6c82c47e3f6692f5f0a0c85409b12b3e5b8d4f8b62147" name="libvirt" arch="src">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="20fba994433c95f5927d4709cf30640fdf2a9379d5c2de463aa2ad66c90fdd76" name="libvirt" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="b25793da2998dcf7c2b6efe3bef45302b8f3b183156a3fc9bdae3c787a314d29" name="libvirt-admin" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="2bd14a0098998cda1141cd27ee52e82da4983b11b371508f2b64665dabc58498" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="496ac439969f1b6f03a3606ceac14a44eaca6f97abce49cf6c3771740faedf4b" name="libvirt-admin" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="ff891b7da331ca204da1c8dc807beba88a6944c06f08dfff204449ca80a392fc" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="c95f4a635b83dc2c35d1e00f226e13bd56682f7270806f8b6e69761affd45778" name="libvirt-admin" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="5eb7afa9145a304154140088366b2a41bb95db900e5145ddaae0233dc96d0490" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="cf8fafa961048a9c0fe8ac6488279a145543d93a2b6ef05aa054035019a45991" name="libvirt-admin" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="e111fac11fe5c59c3b366d8f9b46012a72ccdb586842adbbbebda2094c6c5d27" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="a3a4a9c5e2807514b107c15ae8b4d1afb0205411f95e381617d93ec16322b59a" name="libvirt-admin" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="e276ba4befa711c51eeedc8618f80d766155960d9a532c501ea0ebc60cae55a1" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="375f330c1a6157c81f37e86bb69a83614c46d17c08101900b7335e690286a5cd" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="c5cdc330d8c6640677836be26e384064d9e36f1af8811d2971d7a864875a547d" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="523d7b10b0012fbe35ff8f3ad58416dcc8c54dfecf84321bd04b52360f456ad3" name="libvirt-admin" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="56e2c13ad6c4451b4e4ffdc51761843eae8753c26353a2846a933ddc2ce40ac8" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="cb37f217cfb9b4c0cbc3ec4821463551206e1ffff01fef573fa1295ee830bdf4" name="libvirt-client" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="f34141f92d6db7037e78771215ce47470acbb779c6c7a86df1840d45fae8f53c" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="dc26f23360162d443a08ef9da265bedf433decdf81c183cf55bb18d052eb7dd2" name="libvirt-client" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="e85b6b0aa03b02d7273b838c2aeb53d88dcf4e192e3d4c94f3825868bd8576ed" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="6a23a9ccfc15b1cb301d3b669ee519e67eab49ae95b814cb57964d10057627b5" name="libvirt-client" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="cc16991e0221c528e341dc6ef1b303f83493124042b330ef788a08cdd6c344e2" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="78879f41657756506bf3d26d9fa52a58293e935262cf0d7bf5a5ee6324edd762" name="libvirt-client" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="479646d5c9546044a027a9765572d2dff5db444c39345ceffdfe14cbf1c18544" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="e6f1ef403a9727ef51bbca72a97b04c76af9324087f16a397002ef98a43f86c7" name="libvirt-client" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="ef779be5aa2aa259346f5b12d2371ef3adba5f9738abcc89d2774c3d91529d82" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="46f0ee529e87a89b3ebee09c2e0b63ea2d6a4cf00aeb707557235f2206fc186c" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="d962326d848d0d9f9220d39197472dbb5090589b1dbac28341cb6a5d91cfd548" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="7d1d16981614dcb9b3200697b4f9b70bfbe49e6ba61cd29cfb154ba3e34c9b0c" name="libvirt-client" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="7900a06e82b5b6ded177c0cb5da301e147b52d6b81017ad8f26b72f4574716af" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="f537c931794c7368e8683ccb1b971d36470e4ed67b9b816030112711bf136f81" name="libvirt-daemon" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="52a25b419796d30f0423b5ea934f8649356c7abe0e3942761cd01be95b6d932f" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="f2b640b7cf93a023752f5e34c783fcc7b2a8f40e0068aef601085a0249e23e0f" name="libvirt-daemon" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="5fa6938051fc54d1655124db4dff066c43f78e9d7cea99aaa187e3ac2b39f709" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="f807d62f89712825b3666545e7e2dd75e5b603a30a211879bd81d82b1aca2839" name="libvirt-daemon" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="4dda140740fca5f8d5cf20b13fd1aa4621b1f0711497dc73defc35b0688e8cbf" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="88b9011c42ba4ad0f86e086677c2856f86aa4a0d831c4b783a704e0830c3f938" name="libvirt-daemon" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="772619609f70e76e2379c15163c13d8a6537c3742218fabebae6728f87e36b71" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="29f989e7b65eb916b0de299358fafae209afd9bdf7c1d7b3b32b6c72aaa05aa8" name="libvirt-daemon" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="c880ebe97147df752208226f032f10facb410cf74b1c646e27bb09e1ed61a05a" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="d6e0b5414a7c4dcf2b19ba5acdee2affaa460b1de4610e2c83ccd724b574d23f" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="a2f81046a4d2e6d25350d5eca1aa7141290671adcd31c843a9ad143cad8caf84" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="b5331084258b191f0a6488ff925c3836ad918422d54bca56c3ead08ab700ca07" name="libvirt-daemon" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="913410e534c43ceba200a59644efaadfac5793dc07d499b60013b9cc784d71a8" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="02adf16fb990cbf60a8f943b5c75ce750f38c1db6b8e3fe42053f6b0c266cb16" name="libvirt-daemon-config-network" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="06b87f72e4ce6d47f98c8e017614ccb0ce90f3ebeef3e5f937453e51047dc229" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="92552960b0bb815245f62b81bbc2aaf53fdb9f3d0cfd3509941162564191fd8f" name="libvirt-daemon-config-network" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="3cdd9ce627b221d701b7ba29dc911010d4da3dceb34b0335ef003cddf5c1c8f7" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="7e1ad6688386f4d90c8bc8303f5c74c9e6ce1814796f0a9767083aa6d54a57a2" name="libvirt-daemon-config-network" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="dd4e3eb0bc7855a1d6635a315282827e0bab5edc5ccbc84a3e3fdbf338d1435c" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="114820e59a97a8d4de31c32f8e2f126a0fb8eaddf1ab8d8124a4d68436da2cae" name="libvirt-daemon-config-network" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="60a7fd2a943a89e6acd43525ade5eee4709aec92c7a618cdb70f927a0068d400" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="9e99102d7b9223f7e2b10618060d5c9fe3c7eb271b7d03e48a4da24f9bb5e01a" name="libvirt-daemon-config-network" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="107ed338b93782724af7eb80d2b8deff3c39db5fe6c696a0355b738d24c4ffff" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="c4ffe2b5cc834d9cdee3a026058bc33b29e923c40189afcbae7f4761f9a77566" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="969696c96c47551f044a073ad703a920ac16d9f76cd80c3139a1ed82eb04203c" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="4049c6a1e5fd58ab358ee8d453ee39c36e57db1f2d102af420b83ba6144f4bd5" name="libvirt-daemon-config-network" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="db80655087fd0239ef475722f0402adf4887199380efcb2133b311d1a235d27e" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="3d083825cf1a8d5f9c65b19e5650ca980fabf103de446b2fe8a469070e1519b5" name="libvirt-daemon-config-nwfilter" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="85ce2185d4b822c69405eb50bee3cabce04f6cc89d61fb946fea4c118492d89e" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="a7c7320bfd57e52e61c28dde4b86a29bd9c8158a0b254088d2acb9c43f28a004" name="libvirt-daemon-config-nwfilter" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="dc8cece10625d8d2acf181891aadbffda0e685eaa875cc22e87c8e7bfebdbf7e" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="db33867850d580457e3b60fcded426fafcde78e864c49cfbc4cf9661b4bb8cbc" name="libvirt-daemon-config-nwfilter" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="79ebe59927eaa7ca00f5b8258e895405313cc044fc18007bcdc31f111cab9216" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="7712e317dc9f1f51484f408d4b8ae2b259930f82d5c7ee654ac8777b9dcf1865" name="libvirt-daemon-config-nwfilter" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="e2c7b46baa7ebb115d00b5a6fb21d85966ec3fecbb2eac0cbbf126e224b7f517" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="9de31d8b9b17e49711159fe74f71f6427bc6b6f494cd9f18250a5e0dcb74cf93" name="libvirt-daemon-config-nwfilter" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="4d3b35fa8484d5078eeb2ff8e705195a44da33e84f8126b2645c8e7e20cee7ec" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="c309d2684ea03dc5f86799b9cb744bea9b07dabe9c0b3732871341997116d17e" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="de59c185df170eaac6fd25e0837186204bf04b9d105d6218442289df20a423e6" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="38f06db1ddc4cc08e7d191481f9c6042cb63ca7f15b12e4f57764a60662ea81e" name="libvirt-daemon-config-nwfilter" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="189cd6f1b3b8bda93032002ab238d00b5b722ec15e0d27803dceca9700979fa5" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="e972f4bcc4cb84a6fb76f35242bb08f830f39bf3f5100b4d649543014bc8a455" name="libvirt-daemon-driver-interface" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="fbee352f30be92498b1be7610c06639e30e5fb4e6492e87f0637f601c694bcea" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="681dc9a45d7eae3380e32d7ba8a273a4f0f9431a7b565d34ccbf90b768ad00ba" name="libvirt-daemon-driver-interface" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="a50439d78eb9ebd81426f9d2dd8d7a74d35a5b7e59b0101dd6dfb9541ea6a28a" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="45dc829da6addc37b8a4bee1dc643e4c1a9f5c45774e273220241edb7b16633e" name="libvirt-daemon-driver-interface" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="b61f4bfe8b3f01fd84c0f366c6e806796796c1654d3768004819a6b6b31d2b3b" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="dfd4e20f7701c2f80c306ee34ee7033abd2806e593cb65c61c6ac1699ca66a22" name="libvirt-daemon-driver-interface" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="f9ce68a8e14a2f8d8941ceba45cd70943e0da744fccaa0fc14784c2ee18ee4a3" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="0f613a84ff1042ade8d3ca0627222ef734ce436187788e89e8c0e57a3816e3a3" name="libvirt-daemon-driver-interface" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="e1f449c879be1b1d681e3f8ff4ebbb34619bb09e954ad76c6e88fb1885849b51" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="61db62967456468a62310d01ad93af63fd031451ee50b003a6bc695350a61843" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="c93c8dee8e76f4a0583ad9df067fad21d20a748244f4b95d594994331ce54ee9" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="8255f08b7d87c1ba53b2878a806890e97f0d06603af79d709e313e1267e895f6" name="libvirt-daemon-driver-interface" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="2d08cffa956891041489b285e2a8e4bb60b7fdc2f23fa30c61464e0b5faa0621" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="34e87a4623986abcebbf3b2af777442c20a3117a0f0f9f0302ee823d25c4d81d" name="libvirt-daemon-driver-lxc" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="81820dfd8681c06113c470062e21b050f9a64e73d8c6bbdde6961b9ccbbcde41" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="c2e41e870ce336e9c4650b1b5014ac5599bbf03cc180ff31361767be775f2180" name="libvirt-daemon-driver-lxc" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="e18c73183aaded9056e372abd19654788d763df8742a90375b4c7edcaa9ba7fe" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="8d1a73f59b2c6aecd5b6af9aee33dc63021e5af1e4e3bae86e420ff52e82d189" name="libvirt-daemon-driver-lxc" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="1558b44ff38568085ff51eafb6c87c97f95a5e61c2c79c6bc53c38b6eafa182a" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="5043f55d920a7aae785b8e84344b775414863abd5538377e45511da7fff8497a" name="libvirt-daemon-driver-lxc" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="5a34b7b2fe2a9fe7448470508b43f710430ae16c68b2547e354c78ab43302895" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="6a60075ebe1b1401977e7628157151d13f8b94c05240214586e20ad0758807af" name="libvirt-daemon-driver-lxc" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="ade466edd8d93adce242260c87b3a202eff36ab9cfc72cedd36e0c58e0ead9bb" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="8a7b10f80a31b769d45e850752f220b7d61bff1e09248db03d50a90fafbf0166" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="1488f1e17ac46206c6c129664812ca1054cd6aa14d80d927338991284338b966" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="c9f51cd4421f592fa1ea4aad1b4107cb1dc927b7a0a9aa6afc0c42facb660fa7" name="libvirt-daemon-driver-lxc" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="c24336084f3b92921a8c1c93d1a31997de6525b1741f742000a853eddee3da68" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="42dad1577c07c979534c17f50bb1f31617660a8701ba3332fe0a02ad6c465670" name="libvirt-daemon-driver-network" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="66f0ab42e94073dfed4de11cc1a38c1441ccae148b529179bc815f0d0156ebfe" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="8d8bc3d119c5fd7ed18f130bd1166a14ff5bf7ca7ea7ac847a8637f0709660c2" name="libvirt-daemon-driver-network" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="ffce350a11645c77c35f1153a86d372180688b3b8177136036f15c70c1a4581d" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="a760bb20691a1ec5daeaafd4f5a9c1d1fc34ab99124db32bc801f6b53204e2e5" name="libvirt-daemon-driver-network" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="5d4539fb0caa1ec5e6586585ede3eace4607b6828b094b27d6d7457b2aa49a30" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="63e0750a58689f967b02dceba390724116dfda85ea8dce9bbdc3e7f3448dcb5c" name="libvirt-daemon-driver-network" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="327e5d5d96f9000ab30bcaf387136c226fb403bfb53ccb5e4492469018432832" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="6b1b6dc551f8668afe4650ad870ba03c70f5a808979318b7efb58699d2a24af3" name="libvirt-daemon-driver-network" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="0f8a64d02fae8f086f7f2865f9e56b26e12e84caa847203dc0f218acc59e0d6e" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="98e9e05b93e62090002e02438ccca884e59113181f4ee02042dd6769d9a905ef" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="51fc2282499a96d329c76267f0940d991e2268f5f74961b961ad885b52ffc6a2" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="2414f9954d32641bd311f3b88f461f6eadd466dcdac53506056370fd328e4c33" name="libvirt-daemon-driver-network" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="40376b27a2916ef3fdef8ec44f9d49a1bc9aa4fff0593889c8282d5afeab075a" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="a7d913e7f6ba51dc3dab3bded3d6fd5b6435dd489f203812d69a0ce783e96a90" name="libvirt-daemon-driver-nodedev" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="4e859c771087341928074a666591f664cabda354c5e9a1a10ac1f5d75eaf4102" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="e56a1bac0fe393d2958d03e0b0c354047dd30e340875d4b6fba98a02199c774d" name="libvirt-daemon-driver-nodedev" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="c399f5415511fc8a61ab3b07a24adc4e579d4d071b7aca3c9b4a9d265b0bc019" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="5631699ec9cd053ea7a512717b0a0dce559ec85ffed44c0f6e5a4df27b7d2a20" name="libvirt-daemon-driver-nodedev" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="233caee08e6ea81dc823f9d317f51a37d8064f7975d09e4d0c1cc0b36f1828b6" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="6d764fceba614d9587371447990a9a6078272d4aae5d57607bd74c946324d4d0" name="libvirt-daemon-driver-nodedev" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="4ef68959a0fb63fa13c39ef57b217eb4645da9b1f6795a14a005fbdaed778499" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="1b8ad27e5333ca8fc47dd9e4c683a2c7343582a95dae6cc4285af3a315aea4e4" name="libvirt-daemon-driver-nodedev" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="e932b33ade8e35a24b4427bb376fd3a701bfeb78159442edb034ac0f45fc4f1d" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="4f802bdb04e4d18b81ff886489126d899a30dc77b45c59442fa51076e5912de1" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="988e97168387545f8196c3d7f522170749d183d4ef320d1ce885a25d9cbe812f" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="e6cd8ea34151671c35d4c5a38af318719ec9e277580b8072e9d2eb10b9f2fb3a" name="libvirt-daemon-driver-nodedev" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="f9ac1994e80166c92711a7194f6981483f15e96c875fa28d785e8ad7495ba914" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="53d09fd5f6d29d39e5462893161712329bcfe031b6d813eb08b61e459acfa150" name="libvirt-daemon-driver-nwfilter" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="5e777c21daeb76df363f675348c8777a4003472d31da7285f87a6ad1c061405c" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="c536716253f903913928efc242bd2f05b04f12d5ad10587ab8be3234b6bdb65c" name="libvirt-daemon-driver-nwfilter" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="9d313b44b32757964570c40a6686aea165c3d524c3965703f44a30810cf3c7f4" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="fc6d52d99447e0ba5f913a5495fa983c9db537843d8576c681938f14adcbaac5" name="libvirt-daemon-driver-nwfilter" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="cf54f054ca209bb8f40b585b345116680af13799334a560bc74543c519ec952e" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="994ad2e22998a2f1b80cd633fdf82d33086304d15326909f66664368bb4c8f64" name="libvirt-daemon-driver-nwfilter" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="973d45568be270e7b638763364eeba13e5248a8d2a145103009381ba96f43318" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="27b9952a30b902f8a07ad8ce8524511f74105b4c87a8c4959da012626f6fccc9" name="libvirt-daemon-driver-nwfilter" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="004383623340fd9f10b86dd00f1c17b5c0cf1e0f050eeaf663830a50e4a8a356" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="8f380b3218de17b8573f8e820fbf844d1a6904b19ea9df097a51ea11380c2a91" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="12ae5e1b2a422dbb37764d45fa8c6a8450536d59d0d09122273ca6edd43a1c9a" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="ef7b4bc6d841e1f94e99d7f7ec2bebf7f44e25eabff5de0d4119ab3e5e047eef" name="libvirt-daemon-driver-nwfilter" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="6c1ef150d49a84f8bc361b4eb1223b25f25b3031986ed3a6f6617ddc1aec2926" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="0aaadee1d3a5cf468620860bf6e85195d8d952b6ce0cc47f88e4a2ffeb4e020e" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="d5366f0eea7d20d909e2dc392a8abeb13d71a5ebd6698515fbe5a6fac7cae425" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="7fcc098fe8d2b0dd87146c344c12ea0d6cd1691c61eacfb360c75873318abb0f" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="8a315612da2ce3c0c5b2996cf8686c8d595e6d4f2e7ba261cfc487582c355c2d" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="fc381ce16272327fc1a246b272bf1969d68e80865e8d7b225b42d5e496cad073" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="590d6494a861b23d2e80f9ed8ca76c798d32bb7db4723f2ad251ac374c035ec4" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="8d3955e28ff2532a7ab2fc5bdc552b24dc839f380e927d9103d1e30171daffba" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="f81642a3ea6f3c5ff5086cde3229608911d4de10ebd9bcbcead8014491121444" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="28dc09610026cd751da72ebb2445fc4f2de2d84fa9385dd9e7174d6c8f66eb1c" name="libvirt-daemon-driver-secret" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="a165563ac61dd52032f0a402d28b728daa92d7b0a996e5175472c11eca892fa7" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="b3913645bdef2b4e9e77185b4dff88e25f788a36ef103b1850a6eb5678e2d8ac" name="libvirt-daemon-driver-secret" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="cda172764b88e6228413564604cf208ae27c4fccadb29c1c020ff50c99ef59db" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="d1b5540003d1404aa6b73c0abc4a48765d2784c947cd22af203aef9b121d8273" name="libvirt-daemon-driver-secret" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="87bbb0063f24228b1b9f7f6f6ad2ca102951021b42340472d6fc38c86335680c" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="778384fc291a890ce39d9c2a50217ff79e42b7c6855be91c530cb508cee13f19" name="libvirt-daemon-driver-secret" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="8eb8b0df20416f197b8860bf0049c23100581ab6cf3c312bc17d456c4bbb505d" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="ba795131d69a332a74ac2331e844f951366cf94fc80000b08cbc559eddb4fb32" name="libvirt-daemon-driver-secret" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="d183ac5bc609d569efee6c2df93d5666a54aa2fc1a52522fe0f0038748eca7b5" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="2786ed49d1ee4338a7d251db43cb1fbd36fa472a4ca6c3b8ddc735c85c495705" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="61ceedd804a88e641f4d0c035851f6252fd4dd1f5e66ee78bb296d111d116831" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="fbbc079f3a42bfab41d977676e5fc31d22925873fc0372124395ae923cf20a09" name="libvirt-daemon-driver-secret" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="18f690fb1be188ea000686178b9211f99b3c68b7b601eed9fa2d1c543e8f3e79" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="cf3de1951c18a8a656348cdb81dbfecb4b303f2daa50d97fd308937e692a2092" name="libvirt-daemon-driver-storage" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="7b0bb257dc3a79d97b6b0745cad28ccfe6524c1dcf012a4bf8b0d0837a6dd635" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="48a5bd4f89b9d7346eb926c93e972e31ca698211f7e77faecf61ff0c32d391c4" name="libvirt-daemon-driver-storage" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="b931bdfb3556c3da8769c1e78cf66b0d96b19cb804d66cfb51e5a5605f1b6d6b" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="bcd3f597677fa3e531b166631dee7f2ae55ad77e076dd02abad6fee0fa34d622" name="libvirt-daemon-driver-storage" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="4cd202b7cbdca435b3b27be71849c44577ff4c0555d4eefec68b74f214791280" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="74c5755688e4fb1878f30507011e0f581fd4e793e906e0084dbc7dde0331f05d" name="libvirt-daemon-driver-storage" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="4f16b7004c205c3b71377dd63b3039c1ca60c9342c43c7056ea9fbf5fbc9a169" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="4e794ce7952d9cf7f194648cb5b1693f9281362f7fa030129468f51f19a43fe8" name="libvirt-daemon-driver-storage" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="ac40dfae6bec9164d3d8e145f12d9dec538f0cef2b1c2c8040f553fd06ce6064" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="ad843f6381a68549ad64349641a2959719fb38d35ddc0cbcc4b67ccdbbdb6841" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="68bd9f805c3bc520bda921bfb5a61f5d0c9ecba13377c0de7cdc7cff70a4b984" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="b5d4a50133f6b4446e0ac7bbfd2e0879375764f6f650dee4cea0a3784b9a385b" name="libvirt-daemon-driver-storage" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="e1b4b539c071a2a53d5f5f2126ec083568329bc34b710b6a915fb47393d1feac" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="da03d5a0a39f54c57789a2421bed5deac9f04a90ccde5d7ff0d2aaaa50bc294b" name="libvirt-daemon-driver-storage-core" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="ecaea4018390a7aaa47f57a22d3b440d259e3314b0bd5ff04e563acea5ce8304" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="54198b80daf6e0c01ba47b764423764538cdd3fa17f74fd3baf0a8d1ae5e09c7" name="libvirt-daemon-driver-storage-core" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="5878344806f3a7e322a94b64b9dd21d88489d2448cc63f2e756e3b94012d856a" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="258e642c2c61b84f16a4a8e64ef7fc87d6c9f86628f55f41f3d14ebc08be8ace" name="libvirt-daemon-driver-storage-core" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="748060521dd91b7f81092098b17fa16d8350eab8d17ccc32d50466625bda91fd" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="a01ce545db2c7e56d56cb4919c5718e843491c21999db82c67c896ab6c4c25ec" name="libvirt-daemon-driver-storage-core" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="f50a7f7dd5d8b9166506a924caebc407bf63cdc300bc723e798e504663d1b086" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="a796c3165002980488ee9631267067a1b340323b7c06ba0b431a3fcd3a303413" name="libvirt-daemon-driver-storage-core" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="8615afe4be4aed4c36ca530305cf01098e90b25e29b083ee818e096c88f11075" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="9136a386211090c6cbebb71ebd8e9521f0cf0c6ca48fc16578f7128c4aa13665" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="35ae276ea5b0e0de7a6a5781bf23c2013edaba0e3f3c358c13411a0bc72e9fae" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="46cdbaf12b0ba08d6e8108ecf5c043fd238e5873a4c1dd0596604fad7f7e6838" name="libvirt-daemon-driver-storage-core" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="c130ea4bf231d39ce4295cfdf2c0e54a2bd265ac228a73709bcbcb495861a6ff" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="583b25b2b31d70f78f28c319f71ab8a3b85eb7d8a92ce73a291bf72d01ee675f" name="libvirt-daemon-driver-storage-disk" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="a98d89b88e79477f911d1e1256476203103a98ddb46e88824f14f69d229e54dd" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="56a83e860646f5d89a6503bc56d7966b3e712041acaef95b23b30caac9c4dddf" name="libvirt-daemon-driver-storage-disk" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="b0f5dc34bba47e9b8e073c6559877b80ba9e02941d7afc07e565218224fa3f1e" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="ec0c00fdb2af3dc54efaf1079661434bea7a9955d39e25fcf89931121e7bb3c0" name="libvirt-daemon-driver-storage-disk" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="ff12cd4dc5df77d0ff9f45c29aa66aab9cd17abfe87db8abcc22dc93f65a9510" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="f7156e82b14c431d55c6b53766f4dbd6ca8dae5f38e96e785f6dc3dc3efa9efb" name="libvirt-daemon-driver-storage-disk" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="de995de65ae692572192272cbf9ad527aa8a0a93a32c415d6589571e16d383da" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="a00fbc2e99631db37d3f9992299158aad9a78a6b4b97035ea1577c8746cb7ab1" name="libvirt-daemon-driver-storage-disk" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="b7a39ce98d255351852fe7b0777833ec6244ed2a4c4ed4c69bc7911a780cdb17" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="7c779913994797f3984ad4693fb11318024d16de9a8ded8ddc695a01a62c8da7" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="021806d1dc07ec5fbdfc2350a32f112f7c630a4af7e61c928f288c4601f17a15" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="b1986f4929f29d5ae5fa4a72d3ae63943568d4f2198ccbea446149b3bee0339e" name="libvirt-daemon-driver-storage-disk" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="7ef070971c928ed3fef9731fa04e85b2b4271786fdb838cfb8dc8a00a5c53e99" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="340b0c7d3dbaf13744d9fa8a87b064a5f3602a69b558712c9917927b1dc35bea" name="libvirt-daemon-driver-storage-gluster" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="53d1a765b1d6e4260c44bbeea0f2357caae76ff9102cbadeafcf165932a2149e" name="libvirt-daemon-driver-storage-gluster" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="71b812988131ebe93ba1f5de69c0e8a13b4756468cda26d0e4fc1b3edb841f0d" name="libvirt-daemon-driver-storage-gluster" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="da646d9b239dc1e4c86456396ed81827fa990c7e0c5090d4ba17cb923dec4e88" name="libvirt-daemon-driver-storage-gluster" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="85eb06559922f646551310c12a14737e62de2a51827c2a0ed2e58bcb1947125c" name="libvirt-daemon-driver-storage-gluster" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="32abef87f3097610e36af05acc9de19ca9a83571da8ad385ee082801bcc4a414" name="libvirt-daemon-driver-storage-gluster" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="df444c6c6a435c46cf16452a61acf0dcaa8ebfdb60e096fa36c8bd74be735fda" name="libvirt-daemon-driver-storage-gluster" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="0a3f4dea2f037dda3fb3a193f6d54a8e88e31d4b60d24b024df00b4db091b598" name="libvirt-daemon-driver-storage-gluster" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="e8d60317e04c1ee9a2e0b48df0392f88a9e1a83fa33882b20ce1b08506a3fb7a" name="libvirt-daemon-driver-storage-iscsi" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="193bb385409569d6c6256e5682af0f711112414b338557b509aeb7257f2fcb9e" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="d1c8fd97d84f146b39cd3d33e1cb4652a2c18ab0372aa5f76b63d3b91ba916ff" name="libvirt-daemon-driver-storage-iscsi" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="3327cd740b26f7b6c88a55f4e79615eb28a743abe2b98c337bd4f436cc22b5b9" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="4303b1522fba59a1e8f5bb96b31fd977517c0e7ee7d68afc9d8dce6a5ef9cde5" name="libvirt-daemon-driver-storage-iscsi" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="cff42f7b203e72afc72b36cdeab53132f643eea1d16ef82081b5478317256500" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="316bc5fc9e5c48c9ee93da1ef1860a7a7606c036d2793d7aeb409eab955a5b58" name="libvirt-daemon-driver-storage-iscsi" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="b284733129886413efc75a1bd3eff4fff58357706d70d38c1e42ac37048926a5" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="42e9e928c40ce7dbb8d36909ffbfd521b28b171ebc7e973f30d7493cd76b09ec" name="libvirt-daemon-driver-storage-iscsi" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="89e02249d149d3647a1f1535c316ba666d49d0c8f5bb8db1c6c02e7e0f4961e1" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="c6d8513b4fabcd5b61fa4d09102f174633691ff442e202c642cb09306fbba965" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="32accf2e1559e4c48b1c3cf165e71fd55332c98854973f7c9de4be8d2931da38" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="d599f209c9d6e3d2665465105b0beff819d1423559b943797b96fbceb1e009a5" name="libvirt-daemon-driver-storage-iscsi" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="88e947fa270c2c35c8aa978fe0e3b74cd05afdb59be52691d4e336b94744ddd6" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="33b015bd321950353caf99293fec31c076b9fa8065bc38f5be0450b4d8012629" name="libvirt-daemon-driver-storage-logical" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="a8c848e5de3413a129e61f6331d722dc641b5d9a3285cc6c4e82d4666a3238c7" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="379c395fce77af492a0c4ed52f458a5ee0c5ddcf20933ea2cd08a22c3b93c575" name="libvirt-daemon-driver-storage-logical" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="91b98528661ff758b6ac500331f1e82f87f056d2a1ce6ab6d8ffe40c7e7dca1d" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="e5d90885388baa7c7061e12f40e2e8411859426ee864ee54b332cde1b3299f6b" name="libvirt-daemon-driver-storage-logical" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="aaaa94cc47ec90187d8b64419a7d0e424b9a3224bd86fd4c43f000159fd33146" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="03ce183e7fd5580ebc44fd64e364ee66370417cf3b585a7e752f26aa636ada91" name="libvirt-daemon-driver-storage-logical" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="e75a000bd2e61bdbd3e4416255359ab8f2ea82f0e84b623d5f7fa55008a154c3" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="b5e59d3e72914a59d6d32b30be1bfa3f13110bb1302a47d78987c46be0250826" name="libvirt-daemon-driver-storage-logical" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="3c40b301a9e1a41d6e6c04d4afd0a5b37ac66028ce541620588be03b07dc88ee" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="a58fffcd59168af2795ac51842cf0f4ee1a5aef542076a1d15a98483eee83845" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="bc42262a4e22c6c677ce0c3e752df3de169cce8129ed2b7bc822f759fc7d0b83" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="7b39350153eca7b38c9452e1f2e9f3a7f1e83392579ca7437634313b20c4937c" name="libvirt-daemon-driver-storage-logical" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="6abbb68869921d7cae2555af1f390368f317c2cd3e9a8dd021d9d01248a946c2" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="341997f4685e9877e2e81af997448b5f8d9ecf98befaadfb4e53f885c4d027ae" name="libvirt-daemon-driver-storage-mpath" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="e1dd2f26becde0da825089eafa8a478302451b70b7fc36e6e2b427fc4660cf16" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="7185cbf31f652700275d717747f15a6bc616a365eac0a6f23136bc984079031a" name="libvirt-daemon-driver-storage-mpath" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="2bcdc86a14a5a0fef3773b089394481754a9a8aa13942ea75cbe2e5b847ebfca" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="a879c0ad02e6bfe531309299c831f4d314616cd95dc0b05cbc56a4e93a082836" name="libvirt-daemon-driver-storage-mpath" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="1b1aa9f7949a8b3241f6573e82562db3f2b2fc80c2cee9699b75547417fd4601" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="db4d71ba8aa9a2d83aa70c91286b191e4a510d8ab9534956a18418577d796098" name="libvirt-daemon-driver-storage-mpath" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="fe941fec93d054cfa286c2809e7778a57bf9d0bbfb4672b1e7fee6f906c8d438" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="3114bb5b76fada7dc44c247d826400bc595641516638766b98bc0a68860ea920" name="libvirt-daemon-driver-storage-mpath" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="fe2404c7affe7acba65ba41f4a74c9584b2d4de37b4c8fcca3346f8c00914b90" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="dd9eab0cfe31024260008cf35e194dd941027568f1ed0ec4b05449b6af16e310" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="83d812381961e23a87fe78060e1387f7c7e328bd39965ca3f81b93e97fd35552" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="569767d43c9e014f2335ff8c2ea76b50043c4a7ab6e3ae1bdd306233cd533e64" name="libvirt-daemon-driver-storage-mpath" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="37618a2bb71ddbcf258adfccfeac5c15eaad475c28bcfdd4c7a71372a42148eb" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="7d59b48989f6c2d7a07f97ccbc6bf7735a6dc23daf77c53f68416b454ad7d294" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="bc80dfd3e62a8d3bc62f770a8ed05a049435834e096f2c69a058bd9756a855db" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="2d29934b8c1758cd50c11219b62ee19b0c1ac01647b6d574da82d497ba88ad86" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="6c6bcf19c99f163cf5fb804083cf1abb139dff3f57c092f741228e79f11d759c" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="0a42fdd4ceb79d7324cac17778fe3297b40ef2553fd11b975b2487b0cba17014" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="3bd4a956d0de57df046bf7cdab13601f7b83b1dafb3f5cf3e5b429adbfc7b5e6" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="20c91d10a97e05cf728353d7d709606ca308707ae7a299942870446a53213c14" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="af55929dbb0df570291ad372e0ce9f1496a7ddd02ad4c39ec7e2813fe8015d53" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="ef994a07dbf7677ec1506ee7c8c985e6fd52722fa9b07f2c1e3fbd0570a5b4e1" name="libvirt-daemon-driver-storage-scsi" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="be13f5d1ccb7e0e1e1264aeb77b699195c8d64a91113f109c3dc858f6f786b30" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="0cd235ef8457d91a270a8bcb45930738c288770ba200f23ac5ed76b67ff66b61" name="libvirt-daemon-driver-storage-scsi" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="2598ee64d1f3e0d9ebe75e2cfb3b04a6f3e9759cb018bd85454471ab4bb1f99f" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="b6a6f8415585689e557e0c702c3a85849740f5ca7bf5cdf776fc974f2ba032f9" name="libvirt-daemon-driver-storage-scsi" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="978c45d72a66f6c8012406e9d0e94759359a957315e86d16d01e5379bc663c1e" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="b9030fda6b9495355721caf08cd844881f9e99a075eae3fe3e454f57e1114c12" name="libvirt-daemon-driver-storage-scsi" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="7d9165279ef287fad76b92745a99c0903ffc01a7aa2e8da0be6f99b5508db3a3" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="cbbebe22ffe68902e903958154b0b6224b4ed36fc0524e730235540a234df0e4" name="libvirt-daemon-driver-storage-scsi" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="427285575b1c333c86e00df83f290661407bad8c98ebafa8edea701fc8c68006" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="1b5a1f6fa85b0610f420b88c7d41d398cb1aa87a742173bbaf07eeb5a3289747" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="08ab444e04fd5ea9ec55f20302e05397af59f259a0fece835a1d8c0854702f4f" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="fd4ee6cfd9ec10a80397a5aaee27e8e7db2f9d2223444c2e75d9fb568ebe9f7f" name="libvirt-daemon-driver-storage-scsi" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="1bc001b79266ca6f883a643cf99e08573253294bba93abea2b10093038071699" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="1dbfd5022d3985f940a2bad0a9deecb3ce76ec0647b35568e0ed3a1478cd4590" name="libvirt-daemon-kvm" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="bcb1f646b7ff2301d770ec487f7876e8170025a8d1157f7f9aa45111fc3bb0fb" name="libvirt-daemon-kvm" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="e9ab818ee214ed225b719582f82e261821ef20feb540caae8cd5ade7e6ee5940" name="libvirt-daemon-kvm" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="8ab68b4a76ab759323c3a67e68af3c7fd32666f1dedde31a1fcefb713691d5ae" name="libvirt-daemon-kvm" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="08cfe2254f337a1fba499808d6fbbebf0c012e4354047586931326a63971b0a1" name="libvirt-daemon-kvm" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="ad63d965dd3785db064c75b802513d140f4c34a12259ab5d4c67d2ec9e2147e8" name="libvirt-daemon-kvm" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="3d62ef802a8637a9d89100b02c29e16e374ac970f2a068fc3636a6e84e44efc4" name="libvirt-daemon-kvm" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="e9cfd04b8f30a9412efef83c19eac13104c1f58240fea750a9734c574d4a0101" name="libvirt-daemon-kvm" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="4a23af7d08ff1c74d9bf00149130b882bc7bdb1bedea6cba4dc68e23d6cbf9a9" name="libvirt-daemon-lxc" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="3a5f412ab67e558df8a8a9ca1400cf0fedba366ce33741a8aa65f05dd9dbf164" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="7cceadbc6c61ef27f4cfe6ebc784c208293e6ff84a1e13c458268248669ef66c" name="libvirt-daemon-lxc" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="ddbff9ccbd17a79c6cb68aade5f3541d7a230adbd556fc9f2ef6740f4aed485f" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="fba20a8312425e6e2bbae222ce7165b51ed698a7ee022d80fd2f04bf797f24c2" name="libvirt-daemon-lxc" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="ab288ad0527927153ac0de2a95f2b00c08c21de619b29b754a995c489c9621cc" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="ecabee1ca2b68d9ea46ae6baff1246225865428ee90ad13ce7e088672e8c324a" name="libvirt-daemon-lxc" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="9b6fa67f7310f95fbc875b9780c51e48a55743d9b7a07365689196767017e57d" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="e713e1c04a0e8a208038913fd28cac6367cc4f1f8e3278d7ae55b5e9f40534fb" name="libvirt-daemon-lxc" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="068104526c068cf976959d1ef9379af1a8d728b86ef54a766d95590851822cd9" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="962ca7c84582836929f08dd955d265bda81f78a5df2f6c8419f6466d1d0ab1fb" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="2666014e974f1265034d68f33c38531d13a5b13d8685d2547bc39012aa410a6a" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="4b07dd6c1aa49c900f8dd9da19d6546050616cfd9a9544ecdc5ef7625178a2c6" name="libvirt-daemon-lxc" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="0a453726bd1ac951f46127048566cc5e1a9d33faa8887322d19d7e8061a696f8" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="b4d01d7f09e03943aa8e057ea8a4dc7683d428face15ce48568e433030c61d24" name="libvirt-debuginfo" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="b1cc2323bab239c7ac0cec2b3a5196d63819e2242a61995310a67e4755f9af43" name="libvirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="e4159baccbba92ac273238dce0e148aa57f55c8bf6375c61534def538979f02b" name="libvirt-debuginfo" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="8e8cd3928eab8c2df7cc2f30f37fe26a54282a5849b5b77e029cb56cb7b5a9f0" name="libvirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="c7b13df6ccd0c4a7e9837c6787e2b11407ebcd8cccb08ec683764ab8ebea8435" name="libvirt-debuginfo" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="406a3f88de21178012a087fa246ae014d3b925f02ee7ed85f84cb332d25bfab5" name="libvirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="293d99f0e328bce7f36f45e0458f79f09ba823b02731f0935f9255f83e5e19c4" name="libvirt-debuginfo" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="3c06e0c0e6c168923cbc00f9d13136614e295810175d6ea31d8c12b5cc02ae53" name="libvirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="597b4415d20a5c371daf601604c2a17764214cec285d2627eeff3157befb4148" name="libvirt-debuginfo" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="e8821a15d49c9ce027e922c1fa967d7d00e241bbf338626fd197a1de78dfb43b" name="libvirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="7ecd5f266ca0662a4d279941299b0c38f922ec31fd573b7ffd59e699ab832d7f" name="libvirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="9a914e4b2da195f168f524dfdb3e323252075e2017488f34c3b067ff00f33e06" name="libvirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="d5acb965628ac642266c42d77a683178fdfa484b50372acbc61c93379116f517" name="libvirt-debuginfo" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="6947ad77065d26da572b0424cbb66cdfb79cdb39e3e8d39cd7775b56d4988f8f" name="libvirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="f4676ea62d7d49d5d0bf2bb927438110351d317465ba20e640264f2a77caeedf" name="libvirt-devel" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="d60fb416afef95c34590e8e6c5fe7b90e99e2fae1f7b0d9dffec3949fb6739c1" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="eb2992e593d4dca37fba3797e7ba816abb72a18d5ad8bd22747fca9705a89c96" name="libvirt-devel" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="376e1d1159a64f82fd957d20742f7cad17556f1f23721a799787da7b1f09d073" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="9b8828c13c7e054f9814de6319b94a0520e2651295364881e082360c9093412c" name="libvirt-devel" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="de1671d168fc247bdbac39f6dc39675d4d8b392c7b1a99f47613020146a125eb" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="d8e7542d668f31eace8f85e960b4322a18868e7cc0c884fd4ba13a477c2887bf" name="libvirt-devel" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="6f4f3ea4c8579d4cc3c7a6d3447d5272d253ec615bf0dfd2e838186b0500874a" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="6c4a4ce0c5cd24714f1364ca4ec7b808ecc6b491e67a1ace7e575a1bc9321e8c" name="libvirt-devel" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="1ce1a953957b7f3fee35c001663e8ed8e4c3fe3b361bf920c3ff81eecc2119f9" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="93155245f81478379e3b8989eec103d5532880f09d377d03b7e68338ac88674c" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="710d3b2f72ba3f9db9a1f59e3ceb1d9a9646b832355dc2b65de2dc6df3eab982" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="476a5c48fe3fd7b4f61b57a5ad0515aeedcddc6965a65b49af4776b548b34879" name="libvirt-devel" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="85c260497393476473202fe318bf92dfdd15dda3a5da367a765f1f97e9786836" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="3500e6a130a43fab45a3aa597c7845f1c62095cd0470dd8d4b1ba378330facec" name="libvirt-docs" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="6a9ee801ff9ab4d024fec73b82d98eff58cbd3419e269a72bd2bff8fb27e9f4c" name="libvirt-docs" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="b04ca962761096095b4294c6d04c6ef8aec5e698aee0412d8170316c67fc9970" name="libvirt-docs" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="2a078d3ec552941d321ca998e9a697bcb0703a75f72531d18b809e59394c3891" name="libvirt-docs" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="ef72a6c02b8dfa3214bbe6e1b89e8d4e8a7f61bd278e335ee9766a89d5741961" name="libvirt-docs" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="31a755d1d126758a3b56399460895b5b18d9add0ae419beea88c92925804e980" name="libvirt-docs" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="1ed1b8fee06d855d8c1202ddf20551f5625e7a2fbfb993704f6b207f66c6185c" name="libvirt-docs" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="b0a6e6987580f380f5066baa5c117edfbed956d7874b6d54d26356bc6c994329" name="libvirt-docs" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="98a82c6075a497babf5189699b897a412bd662f52e4fedb8746429344ee2f924" name="libvirt-docs" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="d44bb72b7d45bb0ce3ddbc47dd7e50a7494ef75390bc5c7f11d7750fc9264dae" name="libvirt-docs" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="04cc935b4d9a73f82f1a03af78f3ab3a414a0e141800ccad9d4b6fa3acc3e96f" name="libvirt-docs" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="824c4fd2d0a6e09e36882d55b1928ff6a267d349e5f181e418b9081951a8d965" name="libvirt-docs" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="d43e696ed41a3d24dec28b54d94f98bdc91aa2741bcabb45ee99e59d9d11fd75" name="libvirt-docs" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="a73ce7e314fb7a77eb305ff36c50bf4d129ecabd38515a4d3d2edb5f30f0eece" name="libvirt-docs" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="4e38cc3850b53ec713ae51ab43a6d0082916459732b2fba723c566ca04eb7a96" name="libvirt-libs" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="1a1b3869f849d81d7b835e34e8cdff81d765d6893f9add19eb3bbe68bb630c15" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="b2a4de09d35f2ab77385f03c09926269c722cfae20f3ab2043c64d910e68c480" name="libvirt-libs" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="d57c70e9353c7d21f1a33b3d2e3028489a2f66ea329db248510f73268f218bba" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="42d2de520b6605d3da844529086bb5f17522b72ba1e383af6268a5795c9feb6d" name="libvirt-libs" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="127bd1d25f1de148bfed629a6deb18164d64cff59ed81d5f5f7eb17fd36e121c" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="6be5c6e6295430fc4c16aa960ce2a4ec118615de695bfd71226b5fce888d61ab" name="libvirt-libs" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="59da98614a265e898475dfa5d30ef8998d4977e17435e7e053ab8d4c8a25b2ff" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="fcf9f835a1c65e5fb214c04c83d9b4d9c857b024f8ebcd3698bbca2d8a855f30" name="libvirt-libs" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="62fac3a8f36f8a6e5a8e34f8f357620656f2a4fb8a22d192dc8ef8b69066c532" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="1ca683721497f496b275770780d31bbeee764c8ceb1a0bd7d7c53a4fe1353c82" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="e13a5938bffcda44b70abbc3a30ed06a478756512f9687626d599eec9b895485" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="104a2afafd432896993c4a1db99465364822af0a0365c72d8d352d9230679958" name="libvirt-libs" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="2a5d10311d4dd5b857552fdddcbcd32520409b3bee8518f3cb54e274eb621dd5" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="23abc554d86e0c5486c7ba4ffde1d1437a830d737948697a8b801ee0cfdcbd0e" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="3a59d7512d46f5a81073cc547a025b2b17eb6d395a07eef8e3dd46a771407aad" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="039d804cc42aba0beb6a4a63996166372981b3151b8ce7c43688a5d8a18e173c" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="f8d7ed644a8093ced8090ccfd56fa11b26ea095d121417628b702cc98cb5b1ef" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="205719ee519100a46e4b42d2a62ac50e38ebba1aae96d73fcf1d5c654304db21" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="9dc23c5c36057be47a8f350716aec1a1fd645150037d734cc4e6aca62a7eabcd" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="aaadeebad35d90d7aa7db0ba80d27ac28424c930c85bb21f2e44207ae00c9e51" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="50cf1095aff1c966e01be7bb5421ed54ea9defb994b130a52eb4a928a48cc516" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="0ccfa1ddb0be94cc8fad36e26929ea18314445e8af7147986504fba4a6565abe" name="libvirt-login-shell" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="fde37af3c71ee15deb7ddfb7512b1f9cef0606afb7b728996887c34fe0aa5f4c" name="libvirt-login-shell" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="2e26c6092be05a508f7aa8ede633521e5b3e45067f6b20d02e4804237a230c7b" name="libvirt-login-shell" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="445c44619c50169099f0282eed0c0a3eb40a2abc4dddf8625ceafade0d8b2587" name="libvirt-login-shell" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="701067e6113580412bb36ff924eb3c46f2781df9c6f352a40878fec5229b8e46" name="libvirt-login-shell" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="54c3e4660d083eea1e739b6d319081e2c5862374c29c2dfa9ed8b92a7f256a6b" name="libvirt-login-shell" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="eefe72eb82e62b3216a99f16e862deb31bd6c586b9d0a25855cbb55f84f9bdc6" name="libvirt-login-shell" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="1b80581354c411b7f8c6e5ab0dbaed25fbdbfd1466443c568688e1334f0b53f9" name="libvirt-login-shell" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="975bbc5a82868439fbd828e95d783812b54d57d33c3f0e984087ea39d1191dab" name="libvirt-login-shell" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="cb68c8d0acf42606f6410acc52c081c5734326fe45616aec33dd3113edfe8c74" name="libvirt-login-shell" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="46389823d9d03c544ede457e785ca727f7448516b81c076cc58159816da4863b" name="libvirt-login-shell" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="b939f14ebc59e46c3607cced7e39caee832e61eca3774bd8eb0e705587b98e96" name="libvirt-login-shell" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="3d6a9dc8c0514869475cd107eebae43f3855c5abb74244486a9b19c58395d388" name="libvirt-login-shell" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="d013d3af14e120d581b2144b93503152d62d3c329795acfc4f0624dae5452a4b" name="libvirt-login-shell" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="7d99e9516f261b23fe7dc953b82dc92ca775441e42a7a3762ddae293eda75503" name="libvirt-nss" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="93e334235a4e8f5545a4e8a39b752e208c404abddaf0877ff7ed27acf3844bcb" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-7" date="1496232000">- conf: Resolve corner case on fc_host deletion (rhbz#1420740)
- pci: fix link maximum speed detection (rhbz#1455017)
- qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
- virsh: Track when create pkttyagent (rhbz#1374126)
- conf: add eim attribute to &lt;iommu&gt;&lt;driver&gt; (rhbz#1451282, rhbz#1289153)
- qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
- rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
- rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
- nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
- util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
- qemu: Report shutdown event details (rhbz#1384007)
- qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
</package>
<package pkgid="c97febf13d36e68ed06f1309da5aa2abef9a1a0cbcf7c6d394f885bbc3f49d18" name="libvirt-nss" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="d1df1f01ae70abc7f3982d8f5b81e720ca2eeb07a092f1956848fd16604aa9b0" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="02dd7842d98b4cb7236d55fba3e4d7cadc7dad3b892981498440d6a734ca3646" name="libvirt-nss" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="0ee674681b6e386bd0e4d2676f6361516c4e0a01f7e7c99c1f35a7f4ef5353fa" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="311fb67845c1e476b2f11f88bcfe48d342723729f859882c94306e4448928688" name="libvirt-nss" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="c537340ef038284c9e723461d74b3c7904c53ea250f0d6546bde4eb7d3bec898" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="e17c51c143166b3bd7ed9fbba45ea22b798bcdf70e434a3e9bd0209bde9888d5" name="libvirt-nss" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="d04cbd4ce470043f1c7bc77fbe1e6568df4888575742e3a65cfe631e9d204968" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="75ac83f01ca988aef89943f67204d9dde29f16ba966469ac4f3d55039395e7bb" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="5d608bdd4c34ccaa0ba6edd84b2c8e363fa94bad8fd72d229ae0f43e7321ee27" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="f5947a8a6d5ed56368a09f1812186daf35dcc0714d6024044a77f03066409ce5" name="libvirt-nss" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="373601b9998ed8f09386d68b90e6b14972c82f30a8aefdbc6ba25b391983547e" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="93ca4ab56570004d6c0292bc3e98ebd2df2b64b80363c1037baa8996d2077538" name="libvirt-python" arch="i686">
  <version epoch="0" ver="3.2.0" rel="3.el7_4.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 1.3.5-1" date="1465387200">- Rebased to libvirt-python-1.3.5 (rhbz#1286680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 2.0.0-1" date="1467374400">- Rebased to libvirt-python-2.0.0 (rhbz#1286680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 2.0.0-2" date="1470052800">- Fix crash in storage pool refresh callback (rhbz#1354271)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 2.5.0-1" date="1481025600">- Rebased to libvirt-python-2.5.0 (rhbz#1382642)
- The rebase also fixes the following bugs:
    rhbz#1377071</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.0.0-1" date="1486468800">- Rebased to libvirt-python-3.0.0 (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.1.0-1" date="1488542400">- Rebased to libvirt-python-3.1.0 (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-1" date="1491220800">- Rebased to libvirt-python-3.2.0 (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-2" date="1493812800">- Rebuild libvirt-python (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-3" date="1496836800">- rebuild libvirt-python to pickup new flag for virDomainBlockCopy (rhbz#1459183)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-3.el7_4.1" date="1506945600">- Release the GIL during virDomainGetMemoryStats &amp; virDomainGetDiskErrors (rhbz#1497197)</changelog>
</package>
<package pkgid="f9f3fee9bdb311c4de605dba98b4865f7feef1fea36ead179c83fde510ecf9b2" name="libvirt-python" arch="src">
  <version epoch="0" ver="3.2.0" rel="3.el7_4.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 1.3.5-1" date="1465387200">- Rebased to libvirt-python-1.3.5 (rhbz#1286680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 2.0.0-1" date="1467374400">- Rebased to libvirt-python-2.0.0 (rhbz#1286680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 2.0.0-2" date="1470052800">- Fix crash in storage pool refresh callback (rhbz#1354271)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 2.5.0-1" date="1481025600">- Rebased to libvirt-python-2.5.0 (rhbz#1382642)
- The rebase also fixes the following bugs:
    rhbz#1377071</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.0.0-1" date="1486468800">- Rebased to libvirt-python-3.0.0 (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.1.0-1" date="1488542400">- Rebased to libvirt-python-3.1.0 (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-1" date="1491220800">- Rebased to libvirt-python-3.2.0 (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-2" date="1493812800">- Rebuild libvirt-python (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-3" date="1496836800">- rebuild libvirt-python to pickup new flag for virDomainBlockCopy (rhbz#1459183)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-3.el7_4.1" date="1506945600">- Release the GIL during virDomainGetMemoryStats &amp; virDomainGetDiskErrors (rhbz#1497197)</changelog>
</package>
<package pkgid="5763c9180068d2a5a5cb6ed77254c741288f2a7a707335135121f2339d358165" name="libvirt-python" arch="src">
  <version epoch="0" ver="3.2.0" rel="3.el7_4.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 1.3.5-1" date="1465387200">- Rebased to libvirt-python-1.3.5 (rhbz#1286680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 2.0.0-1" date="1467374400">- Rebased to libvirt-python-2.0.0 (rhbz#1286680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 2.0.0-2" date="1470052800">- Fix crash in storage pool refresh callback (rhbz#1354271)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 2.5.0-1" date="1481025600">- Rebased to libvirt-python-2.5.0 (rhbz#1382642)
- The rebase also fixes the following bugs:
    rhbz#1377071</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.0.0-1" date="1486468800">- Rebased to libvirt-python-3.0.0 (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.1.0-1" date="1488542400">- Rebased to libvirt-python-3.1.0 (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-1" date="1491220800">- Rebased to libvirt-python-3.2.0 (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-2" date="1493812800">- Rebuild libvirt-python (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-3" date="1496836800">- rebuild libvirt-python to pickup new flag for virDomainBlockCopy (rhbz#1459183)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-3.el7_4.1" date="1506945600">- Release the GIL during virDomainGetMemoryStats &amp; virDomainGetDiskErrors (rhbz#1497197)</changelog>
</package>
<package pkgid="2af63738b978b0ec8f03c22a24a152b73e1fa3e33a049c75b01922d61d55c903" name="libvirt-python" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="3.el7_4.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 1.3.5-1" date="1465387200">- Rebased to libvirt-python-1.3.5 (rhbz#1286680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 2.0.0-1" date="1467374400">- Rebased to libvirt-python-2.0.0 (rhbz#1286680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 2.0.0-2" date="1470052800">- Fix crash in storage pool refresh callback (rhbz#1354271)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 2.5.0-1" date="1481025600">- Rebased to libvirt-python-2.5.0 (rhbz#1382642)
- The rebase also fixes the following bugs:
    rhbz#1377071</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.0.0-1" date="1486468800">- Rebased to libvirt-python-3.0.0 (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.1.0-1" date="1488542400">- Rebased to libvirt-python-3.1.0 (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-1" date="1491220800">- Rebased to libvirt-python-3.2.0 (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-2" date="1493812800">- Rebuild libvirt-python (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-3" date="1496836800">- rebuild libvirt-python to pickup new flag for virDomainBlockCopy (rhbz#1459183)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-3.el7_4.1" date="1506945600">- Release the GIL during virDomainGetMemoryStats &amp; virDomainGetDiskErrors (rhbz#1497197)</changelog>
</package>
<package pkgid="c3dc9203606ac566272ab907f6628757af16f40b15b273e35aa140b2543564b9" name="libvirt-python-debuginfo" arch="i686">
  <version epoch="0" ver="3.2.0" rel="3.el7_4.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 1.3.5-1" date="1465387200">- Rebased to libvirt-python-1.3.5 (rhbz#1286680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 2.0.0-1" date="1467374400">- Rebased to libvirt-python-2.0.0 (rhbz#1286680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 2.0.0-2" date="1470052800">- Fix crash in storage pool refresh callback (rhbz#1354271)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 2.5.0-1" date="1481025600">- Rebased to libvirt-python-2.5.0 (rhbz#1382642)
- The rebase also fixes the following bugs:
    rhbz#1377071</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.0.0-1" date="1486468800">- Rebased to libvirt-python-3.0.0 (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.1.0-1" date="1488542400">- Rebased to libvirt-python-3.1.0 (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-1" date="1491220800">- Rebased to libvirt-python-3.2.0 (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-2" date="1493812800">- Rebuild libvirt-python (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-3" date="1496836800">- rebuild libvirt-python to pickup new flag for virDomainBlockCopy (rhbz#1459183)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-3.el7_4.1" date="1506945600">- Release the GIL during virDomainGetMemoryStats &amp; virDomainGetDiskErrors (rhbz#1497197)</changelog>
</package>
<package pkgid="07c58720ed53f2b1eaceecd44d9fb9ced27a4e9e05b349c7f9c4a2791bf52f47" name="libvirt-python-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="3.el7_4.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 1.3.5-1" date="1465387200">- Rebased to libvirt-python-1.3.5 (rhbz#1286680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 2.0.0-1" date="1467374400">- Rebased to libvirt-python-2.0.0 (rhbz#1286680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 2.0.0-2" date="1470052800">- Fix crash in storage pool refresh callback (rhbz#1354271)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 2.5.0-1" date="1481025600">- Rebased to libvirt-python-2.5.0 (rhbz#1382642)
- The rebase also fixes the following bugs:
    rhbz#1377071</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.0.0-1" date="1486468800">- Rebased to libvirt-python-3.0.0 (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.1.0-1" date="1488542400">- Rebased to libvirt-python-3.1.0 (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-1" date="1491220800">- Rebased to libvirt-python-3.2.0 (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-2" date="1493812800">- Rebuild libvirt-python (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-3" date="1496836800">- rebuild libvirt-python to pickup new flag for virDomainBlockCopy (rhbz#1459183)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-3.el7_4.1" date="1506945600">- Release the GIL during virDomainGetMemoryStats &amp; virDomainGetDiskErrors (rhbz#1497197)</changelog>
</package>
<package pkgid="f2dcee908e5402f036a86339eaa233425fc973ab204d2fb84c05902e5cedbd8b" name="libwbclient" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="b1270ea46a9b244c88e4bc8d9dc4d49b910ca6fae2a60f5713e20f8a3e4e9cc1" name="libwbclient" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="90530a3b41e34ff365fcfdb2c97cb099bfbca4d555f0ef0c67e0e092c9acc00b" name="libwbclient" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="6c823ff4ffeb4431da15e2272b3f9fd926c7bc1e4a797518070a658e2e9e589b" name="libwbclient" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="b785c121f24a28de2752bf9a57b3c424770a6939b96da715f46b0c555a70ceba" name="libwbclient" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="a8bc9e2ffb007501cc19596fcf239bf5b32b5139e24774a43e756d49865b8713" name="libwbclient" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="af7e47df764dac9f1cf08a2d3d4241709e88ad201f43f5d49e07acd7528a3cad" name="libwbclient-devel" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="65aed0f856cf72ed80eec3aba33e99014958b8be671387c82c8acd6ea6390cc9" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="00f2d8f3df4086e4041953d45d4910a2a2d3c116ed9c80668fd9e82bac0dd7d5" name="libwbclient-devel" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="45cbf88732620f1707e6c848af7401e5b43dbf8a87874fd902c9c69ce2b7e45b" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="276ee9100d794e23d4f4bbfea7ee3dc9872cf94da4d7d104723a14497e4eeed2" name="libwbclient-devel" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="3d33d013a5f7ab26050356ee3f66af04e4a0ae91dbdc270a08271612cc9f26da" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="eee2a6d6c475e785e95e698c70d23843e232d2f1a633b895de3ba68331820de0" name="linux-firmware" arch="noarch">
  <version epoch="0" ver="20170606" rel="57.gitc990aae.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="eab2258138a5b267af70eabe0819a4487ecc7d57dbcf5f3ecb576c47ef448804" name="linux-firmware" arch="src">
  <version epoch="0" ver="20170606" rel="57.gitc990aae.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160728-48.git0daeaf3" date="1471953600">- Clean up t{4,5}fw.bin symlink leftovers from bug 1262128 (rhbz 1365763)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
</package>
<package pkgid="7f8bccff5a9073d2c341a5c95d9792ce3a2906b1391be54e098a3a1bfbfbd3ad" name="linux-firmware" arch="noarch">
  <version epoch="0" ver="20170606" rel="58.gitc990aae.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="0f3683dac2864696e9092caee7f2922bb791270e3a3773abe076ac85fb9bac0c" name="linux-firmware" arch="noarch">
  <version epoch="0" ver="20170606" rel="58.gitc990aae.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="c3e4ae7a405d9a692d0fbc05a36a9c281a68c45cedd229c6923db76df39c02a5" name="linux-firmware" arch="src">
  <version epoch="0" ver="20170606" rel="58.gitc990aae.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="1c4274f6aab9e5462a1ee09cac4799da7f19e4ed654c1cb52fe76bc239a6af5f" name="linux-firmware" arch="src">
  <version epoch="0" ver="20170606" rel="58.gitc990aae.el7_4"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20160830-49.git7534e19" date="1472558400">- Update to latest upstream linux-firmware image for assorted updates
- Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170217-50.git6d3bc88" date="1487332800">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1395322)
- iwlwifi: Update to the latest firmware released version (rhbz 1385749)
- ath10k: Update to the latest firmware released version (rhbz 1385743)
- hfi1: Update to the latest firmware released version (rhbz 1382805)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170307-51.git87714d8" date="1488888000">- Update to latest upstream linux-firmware image for assorted updates
- chelsio: Update to the latest firmware released version (rhbz 1385911)
- drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-52.git44d8e8d" date="1490702400">- Update to latest upstream linux-firmware image for assorted updates
- nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170328-53.git44d8e8d" date="1495540800">- chelsio: Pull in the latest firmware 1.16.43.0 (rhbz 1451387)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-57.gitc990aae" date="1514376000">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-58.gitc990aae" date="1515844800">- Revert amd-ucode for fam17h
- Add disclaimer message on current u-code updates</changelog>
</package>
<package pkgid="461de6af058bf7cdc7326c682cf1205363e876d9e03fcb0014122a5943db5baa" name="linuxptp" arch="i686">
  <version epoch="0" ver="1.8" rel="3.el7_4.1"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.3-1" date="1375444800">- update to 1.3</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-1.20140718gitbdb6a3" date="1409745600">- update to 20140718gitbdb6a3 (#1108795, #1059039)
- fix PIE linking (#1092537)
- replace hardening build flags with _hardened_build
- include simulation test suite</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-2.20140718gitbdb6a3" date="1413288000">- add timemaster (#1085580)
- send peer messages to correct address
- make NTP SHM segment number configurable
- update UDS handling to allow running multiple ptp4l/phc2sys instances
- fix warnings from static analysis</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-3.20140718gitbdb6a3" date="1416916800">- fix resetting of linreg servo (#1165045)
- fix phc2sys automatic mode with multiple interfaces (#1108795)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-1" date="1486468800">- update to 1.8 (#1359311 #1353336)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-2" date="1489492800">- force BMC election when link goes down</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-3" date="1489579200">- fix backport of linkdown patch</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; 1.8-3.1" date="1504872000">- Resolves: #1489425 - Race condition in phc2sys</changelog>
</package>
<package pkgid="9d18d7ca6290318c78e6253370ea99ca30c74e31c4e446a48ed6838e7a378bff" name="linuxptp" arch="src">
  <version epoch="0" ver="1.8" rel="3.el7_4.1"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.3-1" date="1375444800">- update to 1.3</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-1.20140718gitbdb6a3" date="1409745600">- update to 20140718gitbdb6a3 (#1108795, #1059039)
- fix PIE linking (#1092537)
- replace hardening build flags with _hardened_build
- include simulation test suite</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-2.20140718gitbdb6a3" date="1413288000">- add timemaster (#1085580)
- send peer messages to correct address
- make NTP SHM segment number configurable
- update UDS handling to allow running multiple ptp4l/phc2sys instances
- fix warnings from static analysis</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-3.20140718gitbdb6a3" date="1416916800">- fix resetting of linreg servo (#1165045)
- fix phc2sys automatic mode with multiple interfaces (#1108795)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-1" date="1486468800">- update to 1.8 (#1359311 #1353336)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-2" date="1489492800">- force BMC election when link goes down</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-3" date="1489579200">- fix backport of linkdown patch</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; 1.8-3.1" date="1504872000">- Resolves: #1489425 - Race condition in phc2sys</changelog>
</package>
<package pkgid="c17597831e4cc7e8635085410e9deffb72244472b445b79096fc7bdc091df4ba" name="linuxptp" arch="src">
  <version epoch="0" ver="1.8" rel="3.el7_4.1"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.3-1" date="1375444800">- update to 1.3</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-1.20140718gitbdb6a3" date="1409745600">- update to 20140718gitbdb6a3 (#1108795, #1059039)
- fix PIE linking (#1092537)
- replace hardening build flags with _hardened_build
- include simulation test suite</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-2.20140718gitbdb6a3" date="1413288000">- add timemaster (#1085580)
- send peer messages to correct address
- make NTP SHM segment number configurable
- update UDS handling to allow running multiple ptp4l/phc2sys instances
- fix warnings from static analysis</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-3.20140718gitbdb6a3" date="1416916800">- fix resetting of linreg servo (#1165045)
- fix phc2sys automatic mode with multiple interfaces (#1108795)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-1" date="1486468800">- update to 1.8 (#1359311 #1353336)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-2" date="1489492800">- force BMC election when link goes down</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-3" date="1489579200">- fix backport of linkdown patch</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; 1.8-3.1" date="1504872000">- Resolves: #1489425 - Race condition in phc2sys</changelog>
</package>
<package pkgid="effc61bdfa5a498d85c8c266b72f802a5e5c5d7e03599d8311676b706320e725" name="linuxptp" arch="x86_64">
  <version epoch="0" ver="1.8" rel="3.el7_4.1"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.3-1" date="1375444800">- update to 1.3</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-1.20140718gitbdb6a3" date="1409745600">- update to 20140718gitbdb6a3 (#1108795, #1059039)
- fix PIE linking (#1092537)
- replace hardening build flags with _hardened_build
- include simulation test suite</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-2.20140718gitbdb6a3" date="1413288000">- add timemaster (#1085580)
- send peer messages to correct address
- make NTP SHM segment number configurable
- update UDS handling to allow running multiple ptp4l/phc2sys instances
- fix warnings from static analysis</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-3.20140718gitbdb6a3" date="1416916800">- fix resetting of linreg servo (#1165045)
- fix phc2sys automatic mode with multiple interfaces (#1108795)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-1" date="1486468800">- update to 1.8 (#1359311 #1353336)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-2" date="1489492800">- force BMC election when link goes down</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-3" date="1489579200">- fix backport of linkdown patch</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; 1.8-3.1" date="1504872000">- Resolves: #1489425 - Race condition in phc2sys</changelog>
</package>
<package pkgid="66fc9f28fba8b6e7a2838967bc6810b98b8d7fb5ca54ed7bbd998b21957a3d15" name="linuxptp-debuginfo" arch="i686">
  <version epoch="0" ver="1.8" rel="3.el7_4.1"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.3-1" date="1375444800">- update to 1.3</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-1.20140718gitbdb6a3" date="1409745600">- update to 20140718gitbdb6a3 (#1108795, #1059039)
- fix PIE linking (#1092537)
- replace hardening build flags with _hardened_build
- include simulation test suite</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-2.20140718gitbdb6a3" date="1413288000">- add timemaster (#1085580)
- send peer messages to correct address
- make NTP SHM segment number configurable
- update UDS handling to allow running multiple ptp4l/phc2sys instances
- fix warnings from static analysis</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-3.20140718gitbdb6a3" date="1416916800">- fix resetting of linreg servo (#1165045)
- fix phc2sys automatic mode with multiple interfaces (#1108795)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-1" date="1486468800">- update to 1.8 (#1359311 #1353336)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-2" date="1489492800">- force BMC election when link goes down</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-3" date="1489579200">- fix backport of linkdown patch</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; 1.8-3.1" date="1504872000">- Resolves: #1489425 - Race condition in phc2sys</changelog>
</package>
<package pkgid="84f697af0bfde3a5f137ebb75232bea8a7c2945c365058b0d3c5fd7554ab991c" name="linuxptp-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8" rel="3.el7_4.1"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.3-1" date="1375444800">- update to 1.3</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-1.20140718gitbdb6a3" date="1409745600">- update to 20140718gitbdb6a3 (#1108795, #1059039)
- fix PIE linking (#1092537)
- replace hardening build flags with _hardened_build
- include simulation test suite</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-2.20140718gitbdb6a3" date="1413288000">- add timemaster (#1085580)
- send peer messages to correct address
- make NTP SHM segment number configurable
- update UDS handling to allow running multiple ptp4l/phc2sys instances
- fix warnings from static analysis</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-3.20140718gitbdb6a3" date="1416916800">- fix resetting of linreg servo (#1165045)
- fix phc2sys automatic mode with multiple interfaces (#1108795)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-1" date="1486468800">- update to 1.8 (#1359311 #1353336)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-2" date="1489492800">- force BMC election when link goes down</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-3" date="1489579200">- fix backport of linkdown patch</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; 1.8-3.1" date="1504872000">- Resolves: #1489425 - Race condition in phc2sys</changelog>
</package>
<package pkgid="45a0874d3d2f52bf37dc7e65434cefdc99c1a6dd664972da0a29de579ee4cb26" name="log4j" arch="noarch">
  <version epoch="0" ver="1.2.17" rel="16.el7_4"/>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 0:1.2.17-7" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:1.2.17-8" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-9" date="1365422400">- Reindex sources in more sensible way
- Add manual pages; resolves: rhbz#949413</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-10" date="1365681600">- Fix manpage names, thanks to Michal Srb for reporting</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-11" date="1367236800">- Remove unneeded BR: maven-idea-plugin</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 0:1.2.17-12" date="1368532800">- Add DTD public id to XML and SGML catalogs.</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:1.2.17-13" date="1373544000">- Enable tests
- Fix BR</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-14" date="1382616000">- Remove desktop files</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 01.2.17-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-16" date="1499774400">- Fix socket receiver deserialization vulnerability
- Resolves: CVE-2017-5645</changelog>
</package>
<package pkgid="dd3240083d907363028d4307a11f7ae78d630960f123c0f62e3bc43318adae63" name="log4j" arch="noarch">
  <version epoch="0" ver="1.2.17" rel="16.el7_4"/>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 0:1.2.17-7" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:1.2.17-8" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-9" date="1365422400">- Reindex sources in more sensible way
- Add manual pages; resolves: rhbz#949413</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-10" date="1365681600">- Fix manpage names, thanks to Michal Srb for reporting</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-11" date="1367236800">- Remove unneeded BR: maven-idea-plugin</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 0:1.2.17-12" date="1368532800">- Add DTD public id to XML and SGML catalogs.</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:1.2.17-13" date="1373544000">- Enable tests
- Fix BR</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-14" date="1382616000">- Remove desktop files</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 01.2.17-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-16" date="1499774400">- Fix socket receiver deserialization vulnerability
- Resolves: CVE-2017-5645</changelog>
</package>
<package pkgid="f0ee0ca1cece6e6e536eb650bfaf242083b3b866f1cd40fe976be220e48249a2" name="log4j" arch="src">
  <version epoch="0" ver="1.2.17" rel="16.el7_4"/>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 0:1.2.17-7" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:1.2.17-8" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-9" date="1365422400">- Reindex sources in more sensible way
- Add manual pages; resolves: rhbz#949413</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-10" date="1365681600">- Fix manpage names, thanks to Michal Srb for reporting</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-11" date="1367236800">- Remove unneeded BR: maven-idea-plugin</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 0:1.2.17-12" date="1368532800">- Add DTD public id to XML and SGML catalogs.</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:1.2.17-13" date="1373544000">- Enable tests
- Fix BR</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-14" date="1382616000">- Remove desktop files</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 01.2.17-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-16" date="1499774400">- Fix socket receiver deserialization vulnerability
- Resolves: CVE-2017-5645</changelog>
</package>
<package pkgid="826441ba0902222d04f0134c2c8a1fdb7becadfae3695c8512a24befc01e6e4d" name="log4j" arch="src">
  <version epoch="0" ver="1.2.17" rel="16.el7_4"/>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 0:1.2.17-7" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:1.2.17-8" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-9" date="1365422400">- Reindex sources in more sensible way
- Add manual pages; resolves: rhbz#949413</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-10" date="1365681600">- Fix manpage names, thanks to Michal Srb for reporting</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-11" date="1367236800">- Remove unneeded BR: maven-idea-plugin</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 0:1.2.17-12" date="1368532800">- Add DTD public id to XML and SGML catalogs.</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:1.2.17-13" date="1373544000">- Enable tests
- Fix BR</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-14" date="1382616000">- Remove desktop files</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 01.2.17-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-16" date="1499774400">- Fix socket receiver deserialization vulnerability
- Resolves: CVE-2017-5645</changelog>
</package>
<package pkgid="ebaadc0a26140b410478bcd3e865eaae7aeed2f46a2ea69342007da87e23d0d4" name="log4j-javadoc" arch="noarch">
  <version epoch="0" ver="1.2.17" rel="16.el7_4"/>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 0:1.2.17-7" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:1.2.17-8" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-9" date="1365422400">- Reindex sources in more sensible way
- Add manual pages; resolves: rhbz#949413</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-10" date="1365681600">- Fix manpage names, thanks to Michal Srb for reporting</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-11" date="1367236800">- Remove unneeded BR: maven-idea-plugin</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 0:1.2.17-12" date="1368532800">- Add DTD public id to XML and SGML catalogs.</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:1.2.17-13" date="1373544000">- Enable tests
- Fix BR</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-14" date="1382616000">- Remove desktop files</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 01.2.17-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-16" date="1499774400">- Fix socket receiver deserialization vulnerability
- Resolves: CVE-2017-5645</changelog>
</package>
<package pkgid="5c1edef3a2378b919458e62c34a3c156ae5e2a7c9c0ec52fd249e8984bd4c872" name="log4j-javadoc" arch="noarch">
  <version epoch="0" ver="1.2.17" rel="16.el7_4"/>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 0:1.2.17-7" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:1.2.17-8" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-9" date="1365422400">- Reindex sources in more sensible way
- Add manual pages; resolves: rhbz#949413</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-10" date="1365681600">- Fix manpage names, thanks to Michal Srb for reporting</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-11" date="1367236800">- Remove unneeded BR: maven-idea-plugin</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 0:1.2.17-12" date="1368532800">- Add DTD public id to XML and SGML catalogs.</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:1.2.17-13" date="1373544000">- Enable tests
- Fix BR</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-14" date="1382616000">- Remove desktop files</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 01.2.17-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-16" date="1499774400">- Fix socket receiver deserialization vulnerability
- Resolves: CVE-2017-5645</changelog>
</package>
<package pkgid="a075b8f093a5c59c7062fc0def8326291a7d4563575af15b87921444e44fe373" name="log4j-manual" arch="noarch">
  <version epoch="0" ver="1.2.17" rel="16.el7_4"/>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 0:1.2.17-7" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:1.2.17-8" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-9" date="1365422400">- Reindex sources in more sensible way
- Add manual pages; resolves: rhbz#949413</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-10" date="1365681600">- Fix manpage names, thanks to Michal Srb for reporting</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-11" date="1367236800">- Remove unneeded BR: maven-idea-plugin</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 0:1.2.17-12" date="1368532800">- Add DTD public id to XML and SGML catalogs.</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:1.2.17-13" date="1373544000">- Enable tests
- Fix BR</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-14" date="1382616000">- Remove desktop files</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 01.2.17-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-16" date="1499774400">- Fix socket receiver deserialization vulnerability
- Resolves: CVE-2017-5645</changelog>
</package>
<package pkgid="a401608c979a1a32f85f50b81b1b56c4d96ec012376394904b0f7b7c4acb7c4d" name="log4j-manual" arch="noarch">
  <version epoch="0" ver="1.2.17" rel="16.el7_4"/>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 0:1.2.17-7" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:1.2.17-8" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-9" date="1365422400">- Reindex sources in more sensible way
- Add manual pages; resolves: rhbz#949413</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-10" date="1365681600">- Fix manpage names, thanks to Michal Srb for reporting</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-11" date="1367236800">- Remove unneeded BR: maven-idea-plugin</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 0:1.2.17-12" date="1368532800">- Add DTD public id to XML and SGML catalogs.</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:1.2.17-13" date="1373544000">- Enable tests
- Fix BR</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-14" date="1382616000">- Remove desktop files</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 01.2.17-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-16" date="1499774400">- Fix socket receiver deserialization vulnerability
- Resolves: CVE-2017-5645</changelog>
</package>
<package pkgid="cbb9f7cf9d6c0ac7647d62f7abea875bbb7b069dd6ed41e34790353673dc3961" name="lua-guestfs" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.50" date="1440936000">- v2v:
  * When debugging, dump OVF to stderr.
  * Ignore missing kernels from grub
    resolves: rhbz#1230412
  * Calculate VMware dcPath correctly (1256823)
  * Map empty VMware network or bridge name to default (1257895)
- p2v:
  * Wait for network to come online before testing connection
    resolves: rhbz#1256222
- Fix tests to run correctly with libguestfs-winsupport 7.2.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.51" date="1441108800">- v2v: Fix handling of extra slashes in dcPath calculation
  resolves: rhbz#1258342 rhbz#1256823
- v2v: Fix -oa preallocation option
  resolves: rhbz#1251909</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
</package>
<package pkgid="2c95435557d6b09d347e4e297c2d5163318f852e996865bc99237c863caa006e" name="lua-guestfs" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="0d8f4bb4907d998a5de3c25905d140acff2a28660ffed1ddafc5a7858bc80730" name="mailman" arch="i686">
  <version epoch="3" ver="2.1.15" rel="26.el7_4.1"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 3:2.1.15-19" date="1426593600">- fix #1188043 - set 2775 permission only for /etc/mailman</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 3:2.1.15-20" date="1426593601">- fix #1107652 - do not install patch backup files in documentation</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 3:2.1.15-21" date="1433937600">- fix CVE-2015-2775 - directory traversal in MTA transports</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-22" date="1486728000">- Resolves: #1351939 - Mailman 2.1.15 and later crashes on more email</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-23" date="1487764800">- Resolves: #1232749 - fix bad subject of the welcome email when creating list
  using newlist command</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-24" date="1487764801">- Resolves: #1232737 - Fix instances of #!/usr/bin/env python in mailman</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-24.1" date="1518782400">- Resolves: #1545974 -  Fix XSS vulnerability in web UI</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-24.2" date="1519992000">- Resolves: #1545974 -  Add sanitizer to mitigate XSS injection</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-26" date="1519992001">- Related: #1545974 - Bump release to make it higher than 7.5</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-26.1" date="1519992002">- Related: #1545974 - Add import regular expression module</changelog>
</package>
<package pkgid="5d31ea8a62768a7c533dfae839ebb136712e4d98967982ba08403f459b177580" name="mailman" arch="src">
  <version epoch="3" ver="2.1.15" rel="26.el7_4.1"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 3:2.1.15-19" date="1426593600">- fix #1188043 - set 2775 permission only for /etc/mailman</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 3:2.1.15-20" date="1426593601">- fix #1107652 - do not install patch backup files in documentation</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 3:2.1.15-21" date="1433937600">- fix CVE-2015-2775 - directory traversal in MTA transports</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-22" date="1486728000">- Resolves: #1351939 - Mailman 2.1.15 and later crashes on more email</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-23" date="1487764800">- Resolves: #1232749 - fix bad subject of the welcome email when creating list
  using newlist command</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-24" date="1487764801">- Resolves: #1232737 - Fix instances of #!/usr/bin/env python in mailman</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-24.1" date="1518782400">- Resolves: #1545974 -  Fix XSS vulnerability in web UI</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-24.2" date="1519992000">- Resolves: #1545974 -  Add sanitizer to mitigate XSS injection</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-26" date="1519992001">- Related: #1545974 - Bump release to make it higher than 7.5</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-26.1" date="1519992002">- Related: #1545974 - Add import regular expression module</changelog>
</package>
<package pkgid="8e7b9098f1a50590e4183f9eb98203543189efdf74fe42bf52bdc2a2e371c79e" name="mailman" arch="src">
  <version epoch="3" ver="2.1.15" rel="26.el7_4.1"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 3:2.1.15-19" date="1426593600">- fix #1188043 - set 2775 permission only for /etc/mailman</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 3:2.1.15-20" date="1426593601">- fix #1107652 - do not install patch backup files in documentation</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 3:2.1.15-21" date="1433937600">- fix CVE-2015-2775 - directory traversal in MTA transports</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-22" date="1486728000">- Resolves: #1351939 - Mailman 2.1.15 and later crashes on more email</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-23" date="1487764800">- Resolves: #1232749 - fix bad subject of the welcome email when creating list
  using newlist command</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-24" date="1487764801">- Resolves: #1232737 - Fix instances of #!/usr/bin/env python in mailman</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-24.1" date="1518782400">- Resolves: #1545974 -  Fix XSS vulnerability in web UI</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-24.2" date="1519992000">- Resolves: #1545974 -  Add sanitizer to mitigate XSS injection</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-26" date="1519992001">- Related: #1545974 - Bump release to make it higher than 7.5</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-26.1" date="1519992002">- Related: #1545974 - Add import regular expression module</changelog>
</package>
<package pkgid="93469065441aad162a80a77fbcc84e7d194ec17cee15e60550aa38530da7358d" name="mailman" arch="x86_64">
  <version epoch="3" ver="2.1.15" rel="26.el7_4.1"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 3:2.1.15-19" date="1426593600">- fix #1188043 - set 2775 permission only for /etc/mailman</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 3:2.1.15-20" date="1426593601">- fix #1107652 - do not install patch backup files in documentation</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 3:2.1.15-21" date="1433937600">- fix CVE-2015-2775 - directory traversal in MTA transports</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-22" date="1486728000">- Resolves: #1351939 - Mailman 2.1.15 and later crashes on more email</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-23" date="1487764800">- Resolves: #1232749 - fix bad subject of the welcome email when creating list
  using newlist command</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-24" date="1487764801">- Resolves: #1232737 - Fix instances of #!/usr/bin/env python in mailman</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-24.1" date="1518782400">- Resolves: #1545974 -  Fix XSS vulnerability in web UI</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-24.2" date="1519992000">- Resolves: #1545974 -  Add sanitizer to mitigate XSS injection</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-26" date="1519992001">- Related: #1545974 - Bump release to make it higher than 7.5</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-26.1" date="1519992002">- Related: #1545974 - Add import regular expression module</changelog>
</package>
<package pkgid="dcefd7dfe793f34b52b7999318371b11914c4fcecd1b4874a329e64f49d9320c" name="mailman-debuginfo" arch="i686">
  <version epoch="3" ver="2.1.15" rel="26.el7_4.1"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 3:2.1.15-19" date="1426593600">- fix #1188043 - set 2775 permission only for /etc/mailman</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 3:2.1.15-20" date="1426593601">- fix #1107652 - do not install patch backup files in documentation</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 3:2.1.15-21" date="1433937600">- fix CVE-2015-2775 - directory traversal in MTA transports</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-22" date="1486728000">- Resolves: #1351939 - Mailman 2.1.15 and later crashes on more email</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-23" date="1487764800">- Resolves: #1232749 - fix bad subject of the welcome email when creating list
  using newlist command</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-24" date="1487764801">- Resolves: #1232737 - Fix instances of #!/usr/bin/env python in mailman</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-24.1" date="1518782400">- Resolves: #1545974 -  Fix XSS vulnerability in web UI</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-24.2" date="1519992000">- Resolves: #1545974 -  Add sanitizer to mitigate XSS injection</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-26" date="1519992001">- Related: #1545974 - Bump release to make it higher than 7.5</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-26.1" date="1519992002">- Related: #1545974 - Add import regular expression module</changelog>
</package>
<package pkgid="ab991badf60e572815b69144752fc8013394e301b5e9fbc5f2e51a51cd5a14f2" name="mailman-debuginfo" arch="x86_64">
  <version epoch="3" ver="2.1.15" rel="26.el7_4.1"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 3:2.1.15-19" date="1426593600">- fix #1188043 - set 2775 permission only for /etc/mailman</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 3:2.1.15-20" date="1426593601">- fix #1107652 - do not install patch backup files in documentation</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 3:2.1.15-21" date="1433937600">- fix CVE-2015-2775 - directory traversal in MTA transports</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-22" date="1486728000">- Resolves: #1351939 - Mailman 2.1.15 and later crashes on more email</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-23" date="1487764800">- Resolves: #1232749 - fix bad subject of the welcome email when creating list
  using newlist command</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-24" date="1487764801">- Resolves: #1232737 - Fix instances of #!/usr/bin/env python in mailman</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-24.1" date="1518782400">- Resolves: #1545974 -  Fix XSS vulnerability in web UI</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-24.2" date="1519992000">- Resolves: #1545974 -  Add sanitizer to mitigate XSS injection</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-26" date="1519992001">- Related: #1545974 - Bump release to make it higher than 7.5</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-26.1" date="1519992002">- Related: #1545974 - Add import regular expression module</changelog>
</package>
<package pkgid="eef71fe705a695025a12ba32193281db0295033b8394e5400364a8be1681c4cc" name="mercurial" arch="i686">
  <version epoch="0" ver="2.6.2" rel="8.el7_4"/>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.5.2-2" date="1363608000">- Add hgweb.wsgi</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6-1" date="1368014400">- Update to 2.6</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6.2-1" date="1370520000">- Update to 2.6.2</changelog>
  <changelog author="Ondrej Oprala &lt;ooprala@redhat.com&gt; - 2.6.2-2" date="1380888000">- Use an absolute pathname in hg-ssh's shebang (#987029)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-5" date="1460635200">- Fix CVE-2016-3068 and CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-6" date="1460635201">- fix previous patch for CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-7" date="1497528000">- Fix CVE-2017-9462</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-8" date="1502798400">- Fix CVE-2017-1000115 and CVE-2017-1000116</changelog>
</package>
<package pkgid="06b08b936784164c884d5f435a9d578357208733b90059de9abc359454685ea1" name="mercurial" arch="src">
  <version epoch="0" ver="2.6.2" rel="8.el7_4"/>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.5.2-2" date="1363608000">- Add hgweb.wsgi</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6-1" date="1368014400">- Update to 2.6</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6.2-1" date="1370520000">- Update to 2.6.2</changelog>
  <changelog author="Ondrej Oprala &lt;ooprala@redhat.com&gt; - 2.6.2-2" date="1380888000">- Use an absolute pathname in hg-ssh's shebang (#987029)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-5" date="1460635200">- Fix CVE-2016-3068 and CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-6" date="1460635201">- fix previous patch for CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-7" date="1497528000">- Fix CVE-2017-9462</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-8" date="1502798400">- Fix CVE-2017-1000115 and CVE-2017-1000116</changelog>
</package>
<package pkgid="4f5d40e48bc1b73df7ac589036a25873ba75946338cdc936f158dbeb0b3f76ce" name="mercurial" arch="src">
  <version epoch="0" ver="2.6.2" rel="8.el7_4"/>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.5.2-2" date="1363608000">- Add hgweb.wsgi</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6-1" date="1368014400">- Update to 2.6</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6.2-1" date="1370520000">- Update to 2.6.2</changelog>
  <changelog author="Ondrej Oprala &lt;ooprala@redhat.com&gt; - 2.6.2-2" date="1380888000">- Use an absolute pathname in hg-ssh's shebang (#987029)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-5" date="1460635200">- Fix CVE-2016-3068 and CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-6" date="1460635201">- fix previous patch for CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-7" date="1497528000">- Fix CVE-2017-9462</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-8" date="1502798400">- Fix CVE-2017-1000115 and CVE-2017-1000116</changelog>
</package>
<package pkgid="c3e474854aec62a3e6daacc20c68a95ed272ae39c6ced7c2a9ebb2420a860dfa" name="mercurial" arch="x86_64">
  <version epoch="0" ver="2.6.2" rel="8.el7_4"/>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.5.2-2" date="1363608000">- Add hgweb.wsgi</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6-1" date="1368014400">- Update to 2.6</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6.2-1" date="1370520000">- Update to 2.6.2</changelog>
  <changelog author="Ondrej Oprala &lt;ooprala@redhat.com&gt; - 2.6.2-2" date="1380888000">- Use an absolute pathname in hg-ssh's shebang (#987029)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-5" date="1460635200">- Fix CVE-2016-3068 and CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-6" date="1460635201">- fix previous patch for CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-7" date="1497528000">- Fix CVE-2017-9462</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-8" date="1502798400">- Fix CVE-2017-1000115 and CVE-2017-1000116</changelog>
</package>
<package pkgid="86c4d0a8debbd43ba05f59fa8ce904a8d87a092f685f661eca60cf9d5cbf5f62" name="mercurial-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.2" rel="8.el7_4"/>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.5.2-2" date="1363608000">- Add hgweb.wsgi</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6-1" date="1368014400">- Update to 2.6</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6.2-1" date="1370520000">- Update to 2.6.2</changelog>
  <changelog author="Ondrej Oprala &lt;ooprala@redhat.com&gt; - 2.6.2-2" date="1380888000">- Use an absolute pathname in hg-ssh's shebang (#987029)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-5" date="1460635200">- Fix CVE-2016-3068 and CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-6" date="1460635201">- fix previous patch for CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-7" date="1497528000">- Fix CVE-2017-9462</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-8" date="1502798400">- Fix CVE-2017-1000115 and CVE-2017-1000116</changelog>
</package>
<package pkgid="4ba3672c14fe042656108d4f07670379f4dc939d20db78bcf0dfbedac57c9439" name="mercurial-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.6.2" rel="8.el7_4"/>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.5.2-2" date="1363608000">- Add hgweb.wsgi</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6-1" date="1368014400">- Update to 2.6</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6.2-1" date="1370520000">- Update to 2.6.2</changelog>
  <changelog author="Ondrej Oprala &lt;ooprala@redhat.com&gt; - 2.6.2-2" date="1380888000">- Use an absolute pathname in hg-ssh's shebang (#987029)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-5" date="1460635200">- Fix CVE-2016-3068 and CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-6" date="1460635201">- fix previous patch for CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-7" date="1497528000">- Fix CVE-2017-9462</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-8" date="1502798400">- Fix CVE-2017-1000115 and CVE-2017-1000116</changelog>
</package>
<package pkgid="704068c607b3163ca04631159a0efe131f1aeb20a5863c7dde6f3a097f72d18d" name="mercurial-hgk" arch="i686">
  <version epoch="0" ver="2.6.2" rel="8.el7_4"/>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.5.2-2" date="1363608000">- Add hgweb.wsgi</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6-1" date="1368014400">- Update to 2.6</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6.2-1" date="1370520000">- Update to 2.6.2</changelog>
  <changelog author="Ondrej Oprala &lt;ooprala@redhat.com&gt; - 2.6.2-2" date="1380888000">- Use an absolute pathname in hg-ssh's shebang (#987029)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-5" date="1460635200">- Fix CVE-2016-3068 and CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-6" date="1460635201">- fix previous patch for CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-7" date="1497528000">- Fix CVE-2017-9462</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-8" date="1502798400">- Fix CVE-2017-1000115 and CVE-2017-1000116</changelog>
</package>
<package pkgid="f43a216c0b7ab1ecb14ab18a71e7421ffa88da96ef57497d717a6cad31af2130" name="mercurial-hgk" arch="x86_64">
  <version epoch="0" ver="2.6.2" rel="8.el7_4"/>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.5.2-2" date="1363608000">- Add hgweb.wsgi</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6-1" date="1368014400">- Update to 2.6</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6.2-1" date="1370520000">- Update to 2.6.2</changelog>
  <changelog author="Ondrej Oprala &lt;ooprala@redhat.com&gt; - 2.6.2-2" date="1380888000">- Use an absolute pathname in hg-ssh's shebang (#987029)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-5" date="1460635200">- Fix CVE-2016-3068 and CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-6" date="1460635201">- fix previous patch for CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-7" date="1497528000">- Fix CVE-2017-9462</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-8" date="1502798400">- Fix CVE-2017-1000115 and CVE-2017-1000116</changelog>
</package>
<package pkgid="7ca11e3fddaff096a2d3406276f357525cee7dd4e57919fbaf32a676ed2e4587" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="22.2.el7"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-15" date="1467201600">- Load CPU microcode update only on supproted systems.
- Resolves: #1307179</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-16" date="1469102400">- Update to upstream 2.1-10. Intel CPU microcode update to 20160714.
- Resolves: #1358047</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-17" date="1480507200">- Move dracut call into posttrans phase.
- Resolves: #1398698</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-18" date="1481889600">- Fix issue with hot microcode cpu reload.
- Resolves: #1398698</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-19" date="1483963200">- Fix broken quoting in ExecStart line.
- Resolves: #1411232</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-20" date="1484740800">- Fix issue with hot microcode cpu reload.
- Resolves: #1411232</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-21" date="1488888000">- Rpm scriptlets should only rebuild the current kernel's initrd.
- Resolves: #1420180</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22" date="1495627200">- Update to upstream 2.1-12. Intel CPU microcode update to 20170511.
- Resolves: #1384218</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.1" date="1500984000">- Update to upstream 2.1-13. Intel CPU microcode update to 20170707.
- Resolves: #1474844</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.2" date="1513339200">- Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
- Resolves: #1527358</changelog>
</package>
<package pkgid="f6c9e6169fd7d4df3d22ba0207ca34df2d900ac60b86b5849fb7aa216ae3b157" name="microcode_ctl" arch="x86_64">
  <version epoch="2" ver="2.1" rel="22.2.el7"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-15" date="1467201600">- Load CPU microcode update only on supproted systems.
- Resolves: #1307179</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-16" date="1469102400">- Update to upstream 2.1-10. Intel CPU microcode update to 20160714.
- Resolves: #1358047</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-17" date="1480507200">- Move dracut call into posttrans phase.
- Resolves: #1398698</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-18" date="1481889600">- Fix issue with hot microcode cpu reload.
- Resolves: #1398698</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-19" date="1483963200">- Fix broken quoting in ExecStart line.
- Resolves: #1411232</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-20" date="1484740800">- Fix issue with hot microcode cpu reload.
- Resolves: #1411232</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-21" date="1488888000">- Rpm scriptlets should only rebuild the current kernel's initrd.
- Resolves: #1420180</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22" date="1495627200">- Update to upstream 2.1-12. Intel CPU microcode update to 20170511.
- Resolves: #1384218</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.1" date="1500984000">- Update to upstream 2.1-13. Intel CPU microcode update to 20170707.
- Resolves: #1474844</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.2" date="1513339200">- Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
- Resolves: #1527358</changelog>
</package>
<package pkgid="7854af1c9decbf34588731df7255f7c38c7b737de6775969583f094f32fff674" name="microcode_ctl" arch="i686">
  <version epoch="2" ver="2.1" rel="22.5.el7_4"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-18" date="1481889600">- Fix issue with hot microcode cpu reload.
- Resolves: #1398698</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-19" date="1483963200">- Fix broken quoting in ExecStart line.
- Resolves: #1411232</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-20" date="1484740800">- Fix issue with hot microcode cpu reload.
- Resolves: #1411232</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-21" date="1488888000">- Rpm scriptlets should only rebuild the current kernel's initrd.
- Resolves: #1420180</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22" date="1495627200">- Update to upstream 2.1-12. Intel CPU microcode update to 20170511.
- Resolves: #1384218</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.1" date="1500984000">- Update to upstream 2.1-13. Intel CPU microcode update to 20170707.
- Resolves: #1474844</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.2" date="1513339200">- Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
- Resolves: #1527358</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.3" date="1515758400">- Don't run dracut if not on a live system
- Resolves: #1531453</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.4" date="1515758401">- Revert Microcode from Intel for Side Channel attack
- Resolves: #1533971</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.5" date="1516017600">- Use right upstream source for revert
- Resolves: #1533971</changelog>
</package>
<package pkgid="221c868ba07b447487343bd3f47aaca938dfaaca474e6033c3ccd80a9be0ee63" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="22.5.el7_4"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-18" date="1481889600">- Fix issue with hot microcode cpu reload.
- Resolves: #1398698</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-19" date="1483963200">- Fix broken quoting in ExecStart line.
- Resolves: #1411232</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-20" date="1484740800">- Fix issue with hot microcode cpu reload.
- Resolves: #1411232</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-21" date="1488888000">- Rpm scriptlets should only rebuild the current kernel's initrd.
- Resolves: #1420180</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22" date="1495627200">- Update to upstream 2.1-12. Intel CPU microcode update to 20170511.
- Resolves: #1384218</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.1" date="1500984000">- Update to upstream 2.1-13. Intel CPU microcode update to 20170707.
- Resolves: #1474844</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.2" date="1513339200">- Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
- Resolves: #1527358</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.3" date="1515758400">- Don't run dracut if not on a live system
- Resolves: #1531453</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.4" date="1515758401">- Revert Microcode from Intel for Side Channel attack
- Resolves: #1533971</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.5" date="1516017600">- Use right upstream source for revert
- Resolves: #1533971</changelog>
</package>
<package pkgid="5aecb48b70a90de43baebdf1195505cd1a359d0a8311484cf9664c6632073495" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="22.5.el7_4"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-18" date="1481889600">- Fix issue with hot microcode cpu reload.
- Resolves: #1398698</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-19" date="1483963200">- Fix broken quoting in ExecStart line.
- Resolves: #1411232</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-20" date="1484740800">- Fix issue with hot microcode cpu reload.
- Resolves: #1411232</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-21" date="1488888000">- Rpm scriptlets should only rebuild the current kernel's initrd.
- Resolves: #1420180</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22" date="1495627200">- Update to upstream 2.1-12. Intel CPU microcode update to 20170511.
- Resolves: #1384218</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.1" date="1500984000">- Update to upstream 2.1-13. Intel CPU microcode update to 20170707.
- Resolves: #1474844</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.2" date="1513339200">- Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
- Resolves: #1527358</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.3" date="1515758400">- Don't run dracut if not on a live system
- Resolves: #1531453</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.4" date="1515758401">- Revert Microcode from Intel for Side Channel attack
- Resolves: #1533971</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.5" date="1516017600">- Use right upstream source for revert
- Resolves: #1533971</changelog>
</package>
<package pkgid="ae63b1b53168a03084ae91e75b0283f90d9e7d57175f26c1e88686ad068fa9f3" name="microcode_ctl" arch="x86_64">
  <version epoch="2" ver="2.1" rel="22.5.el7_4"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-18" date="1481889600">- Fix issue with hot microcode cpu reload.
- Resolves: #1398698</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-19" date="1483963200">- Fix broken quoting in ExecStart line.
- Resolves: #1411232</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-20" date="1484740800">- Fix issue with hot microcode cpu reload.
- Resolves: #1411232</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-21" date="1488888000">- Rpm scriptlets should only rebuild the current kernel's initrd.
- Resolves: #1420180</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22" date="1495627200">- Update to upstream 2.1-12. Intel CPU microcode update to 20170511.
- Resolves: #1384218</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.1" date="1500984000">- Update to upstream 2.1-13. Intel CPU microcode update to 20170707.
- Resolves: #1474844</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.2" date="1513339200">- Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
- Resolves: #1527358</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.3" date="1515758400">- Don't run dracut if not on a live system
- Resolves: #1531453</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.4" date="1515758401">- Revert Microcode from Intel for Side Channel attack
- Resolves: #1533971</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.5" date="1516017600">- Use right upstream source for revert
- Resolves: #1533971</changelog>
</package>
<package pkgid="dcb39017acefb3e9bf1c4cb88575e50779297ba7256d59854324b291c5e91c24" name="microcode_ctl-debuginfo" arch="i686">
  <version epoch="2" ver="2.1" rel="22.5.el7_4"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-18" date="1481889600">- Fix issue with hot microcode cpu reload.
- Resolves: #1398698</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-19" date="1483963200">- Fix broken quoting in ExecStart line.
- Resolves: #1411232</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-20" date="1484740800">- Fix issue with hot microcode cpu reload.
- Resolves: #1411232</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-21" date="1488888000">- Rpm scriptlets should only rebuild the current kernel's initrd.
- Resolves: #1420180</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22" date="1495627200">- Update to upstream 2.1-12. Intel CPU microcode update to 20170511.
- Resolves: #1384218</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.1" date="1500984000">- Update to upstream 2.1-13. Intel CPU microcode update to 20170707.
- Resolves: #1474844</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.2" date="1513339200">- Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
- Resolves: #1527358</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.3" date="1515758400">- Don't run dracut if not on a live system
- Resolves: #1531453</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.4" date="1515758401">- Revert Microcode from Intel for Side Channel attack
- Resolves: #1533971</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.5" date="1516017600">- Use right upstream source for revert
- Resolves: #1533971</changelog>
</package>
<package pkgid="00fefa94df6b4601a431dee8bb63e9f9a0d835c824bc17af16b66e55a4a58d73" name="microcode_ctl-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.1" rel="22.5.el7_4"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-18" date="1481889600">- Fix issue with hot microcode cpu reload.
- Resolves: #1398698</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-19" date="1483963200">- Fix broken quoting in ExecStart line.
- Resolves: #1411232</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-20" date="1484740800">- Fix issue with hot microcode cpu reload.
- Resolves: #1411232</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-21" date="1488888000">- Rpm scriptlets should only rebuild the current kernel's initrd.
- Resolves: #1420180</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22" date="1495627200">- Update to upstream 2.1-12. Intel CPU microcode update to 20170511.
- Resolves: #1384218</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.1" date="1500984000">- Update to upstream 2.1-13. Intel CPU microcode update to 20170707.
- Resolves: #1474844</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.2" date="1513339200">- Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
- Resolves: #1527358</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.3" date="1515758400">- Don't run dracut if not on a live system
- Resolves: #1531453</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.4" date="1515758401">- Revert Microcode from Intel for Side Channel attack
- Resolves: #1533971</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.5" date="1516017600">- Use right upstream source for revert
- Resolves: #1533971</changelog>
</package>
<package pkgid="709008da7eb8ae98c88513cc63c5c5ea6310f7fd1dbc23dd23883d0e5709e556" name="mod_dav_svn" arch="i686">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="c8d82a6493742795cfa024825261847d3290e085f19b5f419af3fdd12b027f87" name="mod_dav_svn" arch="x86_64">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="def74698ac6f54d48f34d75077c69a3d9544f4fcc536d99e3004fcdfae8156f8" name="mod_fcgid" arch="i686">
  <version epoch="0" ver="2.3.9" rel="4.el7_4.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; 2.3.7-2" date="1335960000">- Use 10- prefix for conf file in conf.modules.d with httpd ≥ 2.4
- Use _httpd_confdir throughout</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 2.3.7-3" date="1335960001">- Make %files list more explicit</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 2.3.7-4" date="1341403200">- Move tmpfiles.d config from %{_sysconfdir} to %{_prefix}/lib</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; 2.3.7-5" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; 2.3.7-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 2.3.9-1" date="1381233600">- Update to 2.3.9
  - SECURITY: Fix possible heap buffer overwrite (CVE-2013-4365)
  - Add experimental cmake-based build system for Windows
  - Correctly parse quotation and escaped spaces in FcgidWrapper and the AAA
    Authenticator/Authorizor/Access directives' command line argument, as
    currently documented (PR#51194)
  - Honor quoted FcgidCmdOptions arguments (notably for InitialEnv
    assignments) (PR#51657)
  - Conform script response parsing with mod_cgid and ensure no response body
    is sent when ap_meets_conditions() determines that request conditions are
    met
  - Improve logging in access control hook functions
  - Avoid making internal sub-requests and processing Location headers when in
    FCGI_AUTHORIZER mode, as the auth hook functions already treat Location
    headers returned by scripts as an error since redirections are not
    meaningful in this mode
  - Revert fix for PR#53693, added in 2.3.8 but undocumented
  - Fix issues with a minor optimization added in 2.3.8</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.9-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.3.9-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.9-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.3.9-4.1" date="1508155200">- Resolves: #1501307 - mod_fcgid cause Segmentation fault error while doing
  large file uploads over HTTPS</changelog>
</package>
<package pkgid="1d3094cab257c2ba4ef2a4a90d79497ea8cfc2ce6aef27cbee429e0088575927" name="mod_fcgid" arch="src">
  <version epoch="0" ver="2.3.9" rel="4.el7_4.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; 2.3.7-2" date="1335960000">- Use 10- prefix for conf file in conf.modules.d with httpd ≥ 2.4
- Use _httpd_confdir throughout</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 2.3.7-3" date="1335960001">- Make %files list more explicit</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 2.3.7-4" date="1341403200">- Move tmpfiles.d config from %{_sysconfdir} to %{_prefix}/lib</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; 2.3.7-5" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; 2.3.7-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 2.3.9-1" date="1381233600">- Update to 2.3.9
  - SECURITY: Fix possible heap buffer overwrite (CVE-2013-4365)
  - Add experimental cmake-based build system for Windows
  - Correctly parse quotation and escaped spaces in FcgidWrapper and the AAA
    Authenticator/Authorizor/Access directives' command line argument, as
    currently documented (PR#51194)
  - Honor quoted FcgidCmdOptions arguments (notably for InitialEnv
    assignments) (PR#51657)
  - Conform script response parsing with mod_cgid and ensure no response body
    is sent when ap_meets_conditions() determines that request conditions are
    met
  - Improve logging in access control hook functions
  - Avoid making internal sub-requests and processing Location headers when in
    FCGI_AUTHORIZER mode, as the auth hook functions already treat Location
    headers returned by scripts as an error since redirections are not
    meaningful in this mode
  - Revert fix for PR#53693, added in 2.3.8 but undocumented
  - Fix issues with a minor optimization added in 2.3.8</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.9-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.3.9-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.9-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.3.9-4.1" date="1508155200">- Resolves: #1501307 - mod_fcgid cause Segmentation fault error while doing
  large file uploads over HTTPS</changelog>
</package>
<package pkgid="789a43a6cfc5df3868f07818004a2e8090a85c006b2340f6a59df745411fa188" name="mod_fcgid" arch="src">
  <version epoch="0" ver="2.3.9" rel="4.el7_4.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; 2.3.7-2" date="1335960000">- Use 10- prefix for conf file in conf.modules.d with httpd ≥ 2.4
- Use _httpd_confdir throughout</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 2.3.7-3" date="1335960001">- Make %files list more explicit</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 2.3.7-4" date="1341403200">- Move tmpfiles.d config from %{_sysconfdir} to %{_prefix}/lib</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; 2.3.7-5" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; 2.3.7-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 2.3.9-1" date="1381233600">- Update to 2.3.9
  - SECURITY: Fix possible heap buffer overwrite (CVE-2013-4365)
  - Add experimental cmake-based build system for Windows
  - Correctly parse quotation and escaped spaces in FcgidWrapper and the AAA
    Authenticator/Authorizor/Access directives' command line argument, as
    currently documented (PR#51194)
  - Honor quoted FcgidCmdOptions arguments (notably for InitialEnv
    assignments) (PR#51657)
  - Conform script response parsing with mod_cgid and ensure no response body
    is sent when ap_meets_conditions() determines that request conditions are
    met
  - Improve logging in access control hook functions
  - Avoid making internal sub-requests and processing Location headers when in
    FCGI_AUTHORIZER mode, as the auth hook functions already treat Location
    headers returned by scripts as an error since redirections are not
    meaningful in this mode
  - Revert fix for PR#53693, added in 2.3.8 but undocumented
  - Fix issues with a minor optimization added in 2.3.8</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.9-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.3.9-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.9-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.3.9-4.1" date="1508155200">- Resolves: #1501307 - mod_fcgid cause Segmentation fault error while doing
  large file uploads over HTTPS</changelog>
</package>
<package pkgid="e48e2185c465363e34b118c7c544fcaea365ecedec9f279a2666f09e3430a9f8" name="mod_fcgid" arch="x86_64">
  <version epoch="0" ver="2.3.9" rel="4.el7_4.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; 2.3.7-2" date="1335960000">- Use 10- prefix for conf file in conf.modules.d with httpd ≥ 2.4
- Use _httpd_confdir throughout</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 2.3.7-3" date="1335960001">- Make %files list more explicit</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 2.3.7-4" date="1341403200">- Move tmpfiles.d config from %{_sysconfdir} to %{_prefix}/lib</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; 2.3.7-5" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; 2.3.7-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 2.3.9-1" date="1381233600">- Update to 2.3.9
  - SECURITY: Fix possible heap buffer overwrite (CVE-2013-4365)
  - Add experimental cmake-based build system for Windows
  - Correctly parse quotation and escaped spaces in FcgidWrapper and the AAA
    Authenticator/Authorizor/Access directives' command line argument, as
    currently documented (PR#51194)
  - Honor quoted FcgidCmdOptions arguments (notably for InitialEnv
    assignments) (PR#51657)
  - Conform script response parsing with mod_cgid and ensure no response body
    is sent when ap_meets_conditions() determines that request conditions are
    met
  - Improve logging in access control hook functions
  - Avoid making internal sub-requests and processing Location headers when in
    FCGI_AUTHORIZER mode, as the auth hook functions already treat Location
    headers returned by scripts as an error since redirections are not
    meaningful in this mode
  - Revert fix for PR#53693, added in 2.3.8 but undocumented
  - Fix issues with a minor optimization added in 2.3.8</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.9-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.3.9-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.9-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.3.9-4.1" date="1508155200">- Resolves: #1501307 - mod_fcgid cause Segmentation fault error while doing
  large file uploads over HTTPS</changelog>
</package>
<package pkgid="66af68dc875ce4a910e4f21efe9abd38279daeaf6c5c726c4451ed0c7e8a021e" name="mod_fcgid-debuginfo" arch="i686">
  <version epoch="0" ver="2.3.9" rel="4.el7_4.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; 2.3.7-2" date="1335960000">- Use 10- prefix for conf file in conf.modules.d with httpd ≥ 2.4
- Use _httpd_confdir throughout</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 2.3.7-3" date="1335960001">- Make %files list more explicit</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 2.3.7-4" date="1341403200">- Move tmpfiles.d config from %{_sysconfdir} to %{_prefix}/lib</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; 2.3.7-5" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; 2.3.7-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 2.3.9-1" date="1381233600">- Update to 2.3.9
  - SECURITY: Fix possible heap buffer overwrite (CVE-2013-4365)
  - Add experimental cmake-based build system for Windows
  - Correctly parse quotation and escaped spaces in FcgidWrapper and the AAA
    Authenticator/Authorizor/Access directives' command line argument, as
    currently documented (PR#51194)
  - Honor quoted FcgidCmdOptions arguments (notably for InitialEnv
    assignments) (PR#51657)
  - Conform script response parsing with mod_cgid and ensure no response body
    is sent when ap_meets_conditions() determines that request conditions are
    met
  - Improve logging in access control hook functions
  - Avoid making internal sub-requests and processing Location headers when in
    FCGI_AUTHORIZER mode, as the auth hook functions already treat Location
    headers returned by scripts as an error since redirections are not
    meaningful in this mode
  - Revert fix for PR#53693, added in 2.3.8 but undocumented
  - Fix issues with a minor optimization added in 2.3.8</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.9-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.3.9-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.9-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.3.9-4.1" date="1508155200">- Resolves: #1501307 - mod_fcgid cause Segmentation fault error while doing
  large file uploads over HTTPS</changelog>
</package>
<package pkgid="bcae8b24e7bb98576aa60213459becb49dfc61a47d732b4af1234534ec8750bb" name="mod_fcgid-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.9" rel="4.el7_4.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; 2.3.7-2" date="1335960000">- Use 10- prefix for conf file in conf.modules.d with httpd ≥ 2.4
- Use _httpd_confdir throughout</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 2.3.7-3" date="1335960001">- Make %files list more explicit</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 2.3.7-4" date="1341403200">- Move tmpfiles.d config from %{_sysconfdir} to %{_prefix}/lib</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; 2.3.7-5" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; 2.3.7-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 2.3.9-1" date="1381233600">- Update to 2.3.9
  - SECURITY: Fix possible heap buffer overwrite (CVE-2013-4365)
  - Add experimental cmake-based build system for Windows
  - Correctly parse quotation and escaped spaces in FcgidWrapper and the AAA
    Authenticator/Authorizor/Access directives' command line argument, as
    currently documented (PR#51194)
  - Honor quoted FcgidCmdOptions arguments (notably for InitialEnv
    assignments) (PR#51657)
  - Conform script response parsing with mod_cgid and ensure no response body
    is sent when ap_meets_conditions() determines that request conditions are
    met
  - Improve logging in access control hook functions
  - Avoid making internal sub-requests and processing Location headers when in
    FCGI_AUTHORIZER mode, as the auth hook functions already treat Location
    headers returned by scripts as an error since redirections are not
    meaningful in this mode
  - Revert fix for PR#53693, added in 2.3.8 but undocumented
  - Fix issues with a minor optimization added in 2.3.8</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.9-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.3.9-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.9-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.3.9-4.1" date="1508155200">- Resolves: #1501307 - mod_fcgid cause Segmentation fault error while doing
  large file uploads over HTTPS</changelog>
</package>
<package pkgid="67bd449c58d82f8c445ef9a2974048f33fefcdd6cabc4a6c5cc74d826d0980ae" name="mod_ldap" arch="i686">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.2" date="1502798400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="cbd1c921bf46d2bd48ead317eb1165f87f88d815934cb60f2c98c63c23cdc9a4" name="mod_ldap" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.2" date="1502798400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="bfd193d2f85f2d50e5b7de4e3c5b21832769b21ef14514a80d867e1bc5661e8d" name="mod_ldap" arch="i686">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.5" date="1507723200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="1dee18dee64d030b42d21646b6d008b1737ea25e21cb79363f29437b0c1702bc" name="mod_ldap" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.5" date="1507723200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="fc99fe005e80219bea9fa21a69df65f10eead90127c7d1820aca2458c0680419" name="mod_ldap" arch="i686">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579200">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.6" date="1508414400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="651161bfce1c473b5343c3f67dc665bb617ef1b56885720b693836d49ba13f98" name="mod_ldap" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579200">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.6" date="1508414400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="2fdba43459d26d3a31f96d0002559202606d75e2e066181e6dc0a00a31983d1c" name="mod_nss" arch="i686">
  <version epoch="0" ver="1.0.14" rel="10.el7_4.1"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 1.0.14-2" date="1467115200">- mod_nss sets r-&gt;user in fixup even if it was long ago changed
  by other module (#1347298)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-3" date="1470657600">- Clean up semaphore in nss_pcache on shutdown (#1364560)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-4" date="1470744000">- Update clean semaphore patch to not close pipe twice and to
  shutdown NSS database (#1364560)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-5" date="1470830400">- Update clean semaphore patch to not free the pinList twice.
  (#1364560)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-6" date="1474459200">- Check the NSS certificate database directory for read permissions
  by the Apache user. (#1312583)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-7" date="1474459201">- Add the permission patch to the repository (#1312583)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-8" date="1487851200">- Fail start start when there are invalid Protocols defined (#1389114)
- Handle group membership when testing NSS database filesystem
  permissions (#1395300)
- Add OCSP cache tuning directives (#1392582) 
- Don't share mod_nss NSS database with nss_pcache (#1382102)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-9" date="1494417600">- Update nss_pcache.8 to drop directory and prefix options (#1382102)

- Don't share mod_nss NSS database with nss_pcache (#1382102)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-10" date="1494417601">- Apply the nss_pcache man page patch (#1382102)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-10.1" date="1500465600">- TLS session cache was not working (#1479766)</changelog>
</package>
<package pkgid="6b3d98586f84cbe9936d43a0606db0b78d4ec38d10562a79338eff5b62844f1f" name="mod_nss" arch="src">
  <version epoch="0" ver="1.0.14" rel="10.el7_4.1"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 1.0.14-2" date="1467115200">- mod_nss sets r-&gt;user in fixup even if it was long ago changed
  by other module (#1347298)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-3" date="1470657600">- Clean up semaphore in nss_pcache on shutdown (#1364560)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-4" date="1470744000">- Update clean semaphore patch to not close pipe twice and to
  shutdown NSS database (#1364560)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-5" date="1470830400">- Update clean semaphore patch to not free the pinList twice.
  (#1364560)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-6" date="1474459200">- Check the NSS certificate database directory for read permissions
  by the Apache user. (#1312583)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-7" date="1474459201">- Add the permission patch to the repository (#1312583)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-8" date="1487851200">- Fail start start when there are invalid Protocols defined (#1389114)
- Handle group membership when testing NSS database filesystem
  permissions (#1395300)
- Add OCSP cache tuning directives (#1392582) 
- Don't share mod_nss NSS database with nss_pcache (#1382102)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-9" date="1494417600">- Update nss_pcache.8 to drop directory and prefix options (#1382102)

- Don't share mod_nss NSS database with nss_pcache (#1382102)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-10" date="1494417601">- Apply the nss_pcache man page patch (#1382102)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-10.1" date="1500465600">- TLS session cache was not working (#1479766)</changelog>
</package>
<package pkgid="330c93604cd8a9217794636746dffdbc80625e27a2a502eb10e34e3b8f4767b7" name="mod_nss" arch="src">
  <version epoch="0" ver="1.0.14" rel="10.el7_4.1"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 1.0.14-2" date="1467115200">- mod_nss sets r-&gt;user in fixup even if it was long ago changed
  by other module (#1347298)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-3" date="1470657600">- Clean up semaphore in nss_pcache on shutdown (#1364560)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-4" date="1470744000">- Update clean semaphore patch to not close pipe twice and to
  shutdown NSS database (#1364560)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-5" date="1470830400">- Update clean semaphore patch to not free the pinList twice.
  (#1364560)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-6" date="1474459200">- Check the NSS certificate database directory for read permissions
  by the Apache user. (#1312583)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-7" date="1474459201">- Add the permission patch to the repository (#1312583)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-8" date="1487851200">- Fail start start when there are invalid Protocols defined (#1389114)
- Handle group membership when testing NSS database filesystem
  permissions (#1395300)
- Add OCSP cache tuning directives (#1392582) 
- Don't share mod_nss NSS database with nss_pcache (#1382102)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-9" date="1494417600">- Update nss_pcache.8 to drop directory and prefix options (#1382102)

- Don't share mod_nss NSS database with nss_pcache (#1382102)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-10" date="1494417601">- Apply the nss_pcache man page patch (#1382102)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-10.1" date="1500465600">- TLS session cache was not working (#1479766)</changelog>
</package>
<package pkgid="60bd543ddf04d9f9a97ce6851ccced8c6c38f614d449c6661381a1524687141a" name="mod_nss" arch="x86_64">
  <version epoch="0" ver="1.0.14" rel="10.el7_4.1"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 1.0.14-2" date="1467115200">- mod_nss sets r-&gt;user in fixup even if it was long ago changed
  by other module (#1347298)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-3" date="1470657600">- Clean up semaphore in nss_pcache on shutdown (#1364560)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-4" date="1470744000">- Update clean semaphore patch to not close pipe twice and to
  shutdown NSS database (#1364560)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-5" date="1470830400">- Update clean semaphore patch to not free the pinList twice.
  (#1364560)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-6" date="1474459200">- Check the NSS certificate database directory for read permissions
  by the Apache user. (#1312583)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-7" date="1474459201">- Add the permission patch to the repository (#1312583)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-8" date="1487851200">- Fail start start when there are invalid Protocols defined (#1389114)
- Handle group membership when testing NSS database filesystem
  permissions (#1395300)
- Add OCSP cache tuning directives (#1392582) 
- Don't share mod_nss NSS database with nss_pcache (#1382102)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-9" date="1494417600">- Update nss_pcache.8 to drop directory and prefix options (#1382102)

- Don't share mod_nss NSS database with nss_pcache (#1382102)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-10" date="1494417601">- Apply the nss_pcache man page patch (#1382102)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-10.1" date="1500465600">- TLS session cache was not working (#1479766)</changelog>
</package>
<package pkgid="b452b1f6cc5140009e3d207f7c2027e96a9deffcb0665a7c34b54a868fb3e697" name="mod_nss-debuginfo" arch="i686">
  <version epoch="0" ver="1.0.14" rel="10.el7_4.1"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 1.0.14-2" date="1467115200">- mod_nss sets r-&gt;user in fixup even if it was long ago changed
  by other module (#1347298)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-3" date="1470657600">- Clean up semaphore in nss_pcache on shutdown (#1364560)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-4" date="1470744000">- Update clean semaphore patch to not close pipe twice and to
  shutdown NSS database (#1364560)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-5" date="1470830400">- Update clean semaphore patch to not free the pinList twice.
  (#1364560)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-6" date="1474459200">- Check the NSS certificate database directory for read permissions
  by the Apache user. (#1312583)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-7" date="1474459201">- Add the permission patch to the repository (#1312583)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-8" date="1487851200">- Fail start start when there are invalid Protocols defined (#1389114)
- Handle group membership when testing NSS database filesystem
  permissions (#1395300)
- Add OCSP cache tuning directives (#1392582) 
- Don't share mod_nss NSS database with nss_pcache (#1382102)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-9" date="1494417600">- Update nss_pcache.8 to drop directory and prefix options (#1382102)

- Don't share mod_nss NSS database with nss_pcache (#1382102)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-10" date="1494417601">- Apply the nss_pcache man page patch (#1382102)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-10.1" date="1500465600">- TLS session cache was not working (#1479766)</changelog>
</package>
<package pkgid="6c2928c1e0dd7b1ba69e7281a95e4b9092c893d5551b5e575c31af0974d3f788" name="mod_nss-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.14" rel="10.el7_4.1"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 1.0.14-2" date="1467115200">- mod_nss sets r-&gt;user in fixup even if it was long ago changed
  by other module (#1347298)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-3" date="1470657600">- Clean up semaphore in nss_pcache on shutdown (#1364560)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-4" date="1470744000">- Update clean semaphore patch to not close pipe twice and to
  shutdown NSS database (#1364560)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-5" date="1470830400">- Update clean semaphore patch to not free the pinList twice.
  (#1364560)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-6" date="1474459200">- Check the NSS certificate database directory for read permissions
  by the Apache user. (#1312583)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-7" date="1474459201">- Add the permission patch to the repository (#1312583)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-8" date="1487851200">- Fail start start when there are invalid Protocols defined (#1389114)
- Handle group membership when testing NSS database filesystem
  permissions (#1395300)
- Add OCSP cache tuning directives (#1392582) 
- Don't share mod_nss NSS database with nss_pcache (#1382102)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-9" date="1494417600">- Update nss_pcache.8 to drop directory and prefix options (#1382102)

- Don't share mod_nss NSS database with nss_pcache (#1382102)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-10" date="1494417601">- Apply the nss_pcache man page patch (#1382102)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-10.1" date="1500465600">- TLS session cache was not working (#1479766)</changelog>
</package>
<package pkgid="49330def71bae399350fbbcd9501ad62efdb3f3866440bea0e3fd3179e2ef5dc" name="mod_proxy_html" arch="i686">
  <version epoch="1" ver="2.4.6" rel="67.el7.centos.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.2" date="1502798400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="3319cc87e31ffbe38228dfc4dae8d7fd697822ac2750f67387907253c7a1a9ac" name="mod_proxy_html" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="67.el7.centos.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.2" date="1502798400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="579e792ad3118c8d2e3698b33a22ce2502746a12cad03aa6a9478402edaf3dd7" name="mod_proxy_html" arch="i686">
  <version epoch="1" ver="2.4.6" rel="67.el7.centos.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.5" date="1507723200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="0a8d0ae0e7deb79a12869d6f913918c22911feb09b4a5adb1d4834cb1d59bbbb" name="mod_proxy_html" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="67.el7.centos.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.5" date="1507723200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="c206d87e9fcef496facbb40946693705eb53f09d25e1e25ee808b506ec1cb71f" name="mod_proxy_html" arch="i686">
  <version epoch="1" ver="2.4.6" rel="67.el7.centos.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579200">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.6" date="1508414400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="82a05f97ecc4344f5b4ae2691a2aa33139637507b69383f847a50a9db50698f9" name="mod_proxy_html" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="67.el7.centos.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579200">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.6" date="1508414400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="e87e5fd30d00355b1a3c805546be2db3c2590f2da4f28f5d8043d493c62478ce" name="mod_session" arch="i686">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.2" date="1502798400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="0f9e9487805e9dc4476f7fbac0b45a2864cb6a4b49f5cd7d0b002fe8dae04fed" name="mod_session" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.2" date="1502798400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="382b7adc12e64e5000f99035c8d0b832ccf925ab0c5a60de01809aca9cc508de" name="mod_session" arch="i686">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.5" date="1507723200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="d1ea6fc608879ffa19c57752a11a4fb6e89e88f2fc210bb2a0dedd88029f4889" name="mod_session" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.5" date="1507723200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="09672aef1bcf2c2c03beb1f3c534733a684273250fc96ad542b33129cb298915" name="mod_session" arch="i686">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579200">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.6" date="1508414400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="4f834c8b8d420d27be271cdd5d8d8d74b9fa98a3420ed147cb9d84f76165083b" name="mod_session" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7.centos.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579200">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.6" date="1508414400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="3054cf5adf7f697c58c864f1f27937a80a9dee5c0615e0790d6be931611734e7" name="mod_ssl" arch="i686">
  <version epoch="1" ver="2.4.6" rel="67.el7.centos.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.2" date="1502798400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="6b1d0b812bda922978c52092e69e5996ac5dbaa1cfc173d35341bad108691e20" name="mod_ssl" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="67.el7.centos.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.2" date="1502798400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="38e68f4c3e8f3ed26c63b7cf775d96bb4be729bece1a8bca4f01f0b50e4d5576" name="mod_ssl" arch="i686">
  <version epoch="1" ver="2.4.6" rel="67.el7.centos.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.5" date="1507723200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="39991c276826f94fd1cefdf4a9d661490101c1fa4c6249917bab093f299f5b95" name="mod_ssl" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="67.el7.centos.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.5" date="1507723200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="56f3403910dcc5883da724767b0ee4c616b64f8a3b354f88173768b499d158f3" name="mod_ssl" arch="i686">
  <version epoch="1" ver="2.4.6" rel="67.el7.centos.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579200">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.6" date="1508414400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="8cc04e2ab55464c9d163005654469a70dfef079a503e98fb3eda428f650e9bb4" name="mod_ssl" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="67.el7.centos.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579200">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-67.el7.centos.6" date="1508414400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="45d692c0e76726c329aab172abd4559e608a1ee50af30ff61e08a9bb8b6eee13" name="motif" arch="i686">
  <version epoch="0" ver="2.3.4" rel="10.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-1" date="1351166400">- new version 2.3.4 with LGPL license
- fixed some rpmlint warnings
- new sub package for static libraries
- added /etc/X11/mwm directory
- removed defattrs</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-2" date="1351252800">- fixed requirements according to review (RHBZ#870049)
- flex-static has been renamed to flex-devel with Fedora-18 and RHEL-7</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252801">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
</package>
<package pkgid="4ab91c30e87a462706d26bb957d73aea5b2eac33a3c66b0fc17b939071943b63" name="motif" arch="src">
  <version epoch="0" ver="2.3.4" rel="10.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-1" date="1351166400">- new version 2.3.4 with LGPL license
- fixed some rpmlint warnings
- new sub package for static libraries
- added /etc/X11/mwm directory
- removed defattrs</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-2" date="1351252800">- fixed requirements according to review (RHBZ#870049)
- flex-static has been renamed to flex-devel with Fedora-18 and RHEL-7</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252801">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
</package>
<package pkgid="231a70f5b7cb94a01cdea35d3d61461eb26206b453a77d5e99717ef7a5f62f64" name="motif" arch="src">
  <version epoch="0" ver="2.3.4" rel="10.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-1" date="1351166400">- new version 2.3.4 with LGPL license
- fixed some rpmlint warnings
- new sub package for static libraries
- added /etc/X11/mwm directory
- removed defattrs</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-2" date="1351252800">- fixed requirements according to review (RHBZ#870049)
- flex-static has been renamed to flex-devel with Fedora-18 and RHEL-7</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252801">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
</package>
<package pkgid="1dc9579f3321d0c64e926f0c092261c54cf92300a6f839aec52d6cafef958e08" name="motif" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="10.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-1" date="1351166400">- new version 2.3.4 with LGPL license
- fixed some rpmlint warnings
- new sub package for static libraries
- added /etc/X11/mwm directory
- removed defattrs</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-2" date="1351252800">- fixed requirements according to review (RHBZ#870049)
- flex-static has been renamed to flex-devel with Fedora-18 and RHEL-7</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252801">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
</package>
<package pkgid="44d06187271df4cf824b69553cf4dbe761c6d1d0c08e5484a4bdf321f29f9b32" name="motif" arch="i686">
  <version epoch="0" ver="2.3.4" rel="12.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252800">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1513771200">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1508769</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1513771201">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1519244</changelog>
</package>
<package pkgid="104c4425c8cc6bc00658969a9cd5a4d17118f5ded4dad4a5c523b7f63bd767fe" name="motif" arch="src">
  <version epoch="0" ver="2.3.4" rel="12.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252800">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1513771200">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1508769</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1513771201">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1519244</changelog>
</package>
<package pkgid="bb2becf1416661e017b7da4980b69eb438bf27fd7bb485b911e90ced6fbe347f" name="motif" arch="src">
  <version epoch="0" ver="2.3.4" rel="12.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252800">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1513771200">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1508769</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1513771201">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1519244</changelog>
</package>
<package pkgid="5defc1dc11f415935f80010498be776bc0912bf57e105409f6f8fddf4f3a149e" name="motif" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="12.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252800">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1513771200">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1508769</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1513771201">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1519244</changelog>
</package>
<package pkgid="a00c41529d3cd891866125c5f17ef13da186d0fb9bc3b8e2ab250647710dd4e1" name="motif-debuginfo" arch="i686">
  <version epoch="0" ver="2.3.4" rel="10.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-1" date="1351166400">- new version 2.3.4 with LGPL license
- fixed some rpmlint warnings
- new sub package for static libraries
- added /etc/X11/mwm directory
- removed defattrs</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-2" date="1351252800">- fixed requirements according to review (RHBZ#870049)
- flex-static has been renamed to flex-devel with Fedora-18 and RHEL-7</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252801">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
</package>
<package pkgid="378bbc9280f9c621ca09f72d0d3166068f056d9109c129490b615538b1f073d3" name="motif-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="10.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-1" date="1351166400">- new version 2.3.4 with LGPL license
- fixed some rpmlint warnings
- new sub package for static libraries
- added /etc/X11/mwm directory
- removed defattrs</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-2" date="1351252800">- fixed requirements according to review (RHBZ#870049)
- flex-static has been renamed to flex-devel with Fedora-18 and RHEL-7</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252801">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
</package>
<package pkgid="2e7a8876ba5228d7db27ad8b8ddb6359b373be5cde7682e893d5d146cef9806d" name="motif-debuginfo" arch="i686">
  <version epoch="0" ver="2.3.4" rel="12.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252800">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1513771200">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1508769</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1513771201">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1519244</changelog>
</package>
<package pkgid="c0bde301fc0322bb797454c757db8f9c47fe95ca5e85299f7a9bd6f05a40c50b" name="motif-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="12.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252800">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1513771200">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1508769</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1513771201">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1519244</changelog>
</package>
<package pkgid="abf5246fb70595b50d94035516fc8e4a165ec6df32c376706de85de850f771b2" name="motif-devel" arch="i686">
  <version epoch="0" ver="2.3.4" rel="10.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-1" date="1351166400">- new version 2.3.4 with LGPL license
- fixed some rpmlint warnings
- new sub package for static libraries
- added /etc/X11/mwm directory
- removed defattrs</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-2" date="1351252800">- fixed requirements according to review (RHBZ#870049)
- flex-static has been renamed to flex-devel with Fedora-18 and RHEL-7</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252801">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
</package>
<package pkgid="70df54ffe61bfcfa4af20b730002f39ece3359dc7b504bb9e1554d30437c7562" name="motif-devel" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="10.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-1" date="1351166400">- new version 2.3.4 with LGPL license
- fixed some rpmlint warnings
- new sub package for static libraries
- added /etc/X11/mwm directory
- removed defattrs</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-2" date="1351252800">- fixed requirements according to review (RHBZ#870049)
- flex-static has been renamed to flex-devel with Fedora-18 and RHEL-7</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252801">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
</package>
<package pkgid="858593c0a3a22978377f769dd23f307ec5860314c7b5db6adb679eae0cad6dff" name="motif-devel" arch="i686">
  <version epoch="0" ver="2.3.4" rel="12.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252800">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1513771200">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1508769</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1513771201">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1519244</changelog>
</package>
<package pkgid="f350452b8c0df57abffa2fe4f4af1159956e8c107eded8f6392f18f3ccfe8eea" name="motif-devel" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="12.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252800">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1513771200">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1508769</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1513771201">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1519244</changelog>
</package>
<package pkgid="be100a62b60068fdb04bedf7d17950f0f70f7893d2e5805166a577f4d4408d05" name="motif-static" arch="i686">
  <version epoch="0" ver="2.3.4" rel="10.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-1" date="1351166400">- new version 2.3.4 with LGPL license
- fixed some rpmlint warnings
- new sub package for static libraries
- added /etc/X11/mwm directory
- removed defattrs</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-2" date="1351252800">- fixed requirements according to review (RHBZ#870049)
- flex-static has been renamed to flex-devel with Fedora-18 and RHEL-7</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252801">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
</package>
<package pkgid="00a6b01dd637cbd64809b22e30f4a64d7aac561942eecc86731d5a5c7b7471e4" name="motif-static" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="10.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-1" date="1351166400">- new version 2.3.4 with LGPL license
- fixed some rpmlint warnings
- new sub package for static libraries
- added /etc/X11/mwm directory
- removed defattrs</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-2" date="1351252800">- fixed requirements according to review (RHBZ#870049)
- flex-static has been renamed to flex-devel with Fedora-18 and RHEL-7</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252801">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
</package>
<package pkgid="54cbd9f1a567f0b85a24c2da04a4864cb9fcd6da72be9123b8aa0bdc3d026365" name="motif-static" arch="i686">
  <version epoch="0" ver="2.3.4" rel="12.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252800">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1513771200">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1508769</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1513771201">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1519244</changelog>
</package>
<package pkgid="be4c45842bfb813ed3241903e15ad9ef99b15c766f70e3befdbcbd7f64ec63b5" name="motif-static" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="12.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252800">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1513771200">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1508769</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1513771201">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1519244</changelog>
</package>
<package pkgid="353490588f2c43f0699165a661e78652b61766c6fa39c2e0ac35ec0efef95523" name="mutter" arch="i686">
  <version epoch="0" ver="3.22.3" rel="12.el7_4"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.22.3-4" date="1489492800">- Don't segfault on early exit
- Resolves: #1369073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.3-5" date="1489579200">- Swizzle BGRA buffers to avoid pixel conversions
- Resolves: #1387025</changelog>
  <changelog author="Owen Taylor &lt;otaylor@redhat.com&gt; - 3.22.3-6" date="1489665600">- Add back quad-buffer stereo patches, rebased to 3.22
- Resolves: #1387025</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.22.3-6" date="1489752000">- Recreate build files after modifying templates with the last patch
- Resolves: #1387025</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-7" date="1493380800">- Fix cally translation of screen coordinates
- Resolves: #1439194</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-8" date="1494936000">- Special-case shaped java windows to fix OpenJDK's compliance test
- Resolves: #1363784</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-9" date="1496923200">- Fix crash when a window closes during Alt+Tab
- Resolves: #1438722</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-10" date="1497441600">- Keep OR windows stacked on top
- Resolves: #1437203</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-11" date="1498478400">- Prevent crash when removing workspace with on-all-workspaces windows
  present (like desktop icons)
- Resolves: #1453065</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.3-12" date="1507636800">- Add support for plain old X device configuration
- Resolves: #1515138</changelog>
</package>
<package pkgid="ccdd66aa0a8084eaf229c0bf7036bff01af9bd15e0ec7b236fe54ee534dfb3d4" name="mutter" arch="src">
  <version epoch="0" ver="3.22.3" rel="12.el7_4"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.22.3-4" date="1489492800">- Don't segfault on early exit
- Resolves: #1369073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.3-5" date="1489579200">- Swizzle BGRA buffers to avoid pixel conversions
- Resolves: #1387025</changelog>
  <changelog author="Owen Taylor &lt;otaylor@redhat.com&gt; - 3.22.3-6" date="1489665600">- Add back quad-buffer stereo patches, rebased to 3.22
- Resolves: #1387025</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.22.3-6" date="1489752000">- Recreate build files after modifying templates with the last patch
- Resolves: #1387025</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-7" date="1493380800">- Fix cally translation of screen coordinates
- Resolves: #1439194</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-8" date="1494936000">- Special-case shaped java windows to fix OpenJDK's compliance test
- Resolves: #1363784</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-9" date="1496923200">- Fix crash when a window closes during Alt+Tab
- Resolves: #1438722</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-10" date="1497441600">- Keep OR windows stacked on top
- Resolves: #1437203</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-11" date="1498478400">- Prevent crash when removing workspace with on-all-workspaces windows
  present (like desktop icons)
- Resolves: #1453065</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.3-12" date="1507636800">- Add support for plain old X device configuration
- Resolves: #1515138</changelog>
</package>
<package pkgid="c3f4ea6cafef7744a80eb696e05e472f10456bb892e918087ff5a9d56f883093" name="mutter" arch="src">
  <version epoch="0" ver="3.22.3" rel="12.el7_4"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.22.3-4" date="1489492800">- Don't segfault on early exit
- Resolves: #1369073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.3-5" date="1489579200">- Swizzle BGRA buffers to avoid pixel conversions
- Resolves: #1387025</changelog>
  <changelog author="Owen Taylor &lt;otaylor@redhat.com&gt; - 3.22.3-6" date="1489665600">- Add back quad-buffer stereo patches, rebased to 3.22
- Resolves: #1387025</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.22.3-6" date="1489752000">- Recreate build files after modifying templates with the last patch
- Resolves: #1387025</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-7" date="1493380800">- Fix cally translation of screen coordinates
- Resolves: #1439194</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-8" date="1494936000">- Special-case shaped java windows to fix OpenJDK's compliance test
- Resolves: #1363784</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-9" date="1496923200">- Fix crash when a window closes during Alt+Tab
- Resolves: #1438722</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-10" date="1497441600">- Keep OR windows stacked on top
- Resolves: #1437203</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-11" date="1498478400">- Prevent crash when removing workspace with on-all-workspaces windows
  present (like desktop icons)
- Resolves: #1453065</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.3-12" date="1507636800">- Add support for plain old X device configuration
- Resolves: #1515138</changelog>
</package>
<package pkgid="9be3c8bc62c727b1c4e715db796dce4293635c3721f1f54d49ebadfa0b88cd08" name="mutter" arch="x86_64">
  <version epoch="0" ver="3.22.3" rel="12.el7_4"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.22.3-4" date="1489492800">- Don't segfault on early exit
- Resolves: #1369073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.3-5" date="1489579200">- Swizzle BGRA buffers to avoid pixel conversions
- Resolves: #1387025</changelog>
  <changelog author="Owen Taylor &lt;otaylor@redhat.com&gt; - 3.22.3-6" date="1489665600">- Add back quad-buffer stereo patches, rebased to 3.22
- Resolves: #1387025</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.22.3-6" date="1489752000">- Recreate build files after modifying templates with the last patch
- Resolves: #1387025</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-7" date="1493380800">- Fix cally translation of screen coordinates
- Resolves: #1439194</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-8" date="1494936000">- Special-case shaped java windows to fix OpenJDK's compliance test
- Resolves: #1363784</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-9" date="1496923200">- Fix crash when a window closes during Alt+Tab
- Resolves: #1438722</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-10" date="1497441600">- Keep OR windows stacked on top
- Resolves: #1437203</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-11" date="1498478400">- Prevent crash when removing workspace with on-all-workspaces windows
  present (like desktop icons)
- Resolves: #1453065</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.3-12" date="1507636800">- Add support for plain old X device configuration
- Resolves: #1515138</changelog>
</package>
<package pkgid="be2812c7cbd6a4173b8fc3b8b8a54cf93f9aea0cb42e969dbc36621629909731" name="mutter-debuginfo" arch="i686">
  <version epoch="0" ver="3.22.3" rel="12.el7_4"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.22.3-4" date="1489492800">- Don't segfault on early exit
- Resolves: #1369073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.3-5" date="1489579200">- Swizzle BGRA buffers to avoid pixel conversions
- Resolves: #1387025</changelog>
  <changelog author="Owen Taylor &lt;otaylor@redhat.com&gt; - 3.22.3-6" date="1489665600">- Add back quad-buffer stereo patches, rebased to 3.22
- Resolves: #1387025</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.22.3-6" date="1489752000">- Recreate build files after modifying templates with the last patch
- Resolves: #1387025</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-7" date="1493380800">- Fix cally translation of screen coordinates
- Resolves: #1439194</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-8" date="1494936000">- Special-case shaped java windows to fix OpenJDK's compliance test
- Resolves: #1363784</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-9" date="1496923200">- Fix crash when a window closes during Alt+Tab
- Resolves: #1438722</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-10" date="1497441600">- Keep OR windows stacked on top
- Resolves: #1437203</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-11" date="1498478400">- Prevent crash when removing workspace with on-all-workspaces windows
  present (like desktop icons)
- Resolves: #1453065</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.3-12" date="1507636800">- Add support for plain old X device configuration
- Resolves: #1515138</changelog>
</package>
<package pkgid="63e5d288ebd592c1493a0990c1b8b11f5e46cb506568f75d04ce32254126dda3" name="mutter-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.22.3" rel="12.el7_4"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.22.3-4" date="1489492800">- Don't segfault on early exit
- Resolves: #1369073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.3-5" date="1489579200">- Swizzle BGRA buffers to avoid pixel conversions
- Resolves: #1387025</changelog>
  <changelog author="Owen Taylor &lt;otaylor@redhat.com&gt; - 3.22.3-6" date="1489665600">- Add back quad-buffer stereo patches, rebased to 3.22
- Resolves: #1387025</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.22.3-6" date="1489752000">- Recreate build files after modifying templates with the last patch
- Resolves: #1387025</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-7" date="1493380800">- Fix cally translation of screen coordinates
- Resolves: #1439194</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-8" date="1494936000">- Special-case shaped java windows to fix OpenJDK's compliance test
- Resolves: #1363784</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-9" date="1496923200">- Fix crash when a window closes during Alt+Tab
- Resolves: #1438722</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-10" date="1497441600">- Keep OR windows stacked on top
- Resolves: #1437203</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-11" date="1498478400">- Prevent crash when removing workspace with on-all-workspaces windows
  present (like desktop icons)
- Resolves: #1453065</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.3-12" date="1507636800">- Add support for plain old X device configuration
- Resolves: #1515138</changelog>
</package>
<package pkgid="efcb0d11359fde2136a30fc2da9f42f641bfdf56a99dc7c29182caa8d814b5b0" name="mutter-devel" arch="i686">
  <version epoch="0" ver="3.22.3" rel="12.el7_4"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.22.3-4" date="1489492800">- Don't segfault on early exit
- Resolves: #1369073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.3-5" date="1489579200">- Swizzle BGRA buffers to avoid pixel conversions
- Resolves: #1387025</changelog>
  <changelog author="Owen Taylor &lt;otaylor@redhat.com&gt; - 3.22.3-6" date="1489665600">- Add back quad-buffer stereo patches, rebased to 3.22
- Resolves: #1387025</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.22.3-6" date="1489752000">- Recreate build files after modifying templates with the last patch
- Resolves: #1387025</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-7" date="1493380800">- Fix cally translation of screen coordinates
- Resolves: #1439194</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-8" date="1494936000">- Special-case shaped java windows to fix OpenJDK's compliance test
- Resolves: #1363784</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-9" date="1496923200">- Fix crash when a window closes during Alt+Tab
- Resolves: #1438722</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-10" date="1497441600">- Keep OR windows stacked on top
- Resolves: #1437203</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-11" date="1498478400">- Prevent crash when removing workspace with on-all-workspaces windows
  present (like desktop icons)
- Resolves: #1453065</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.3-12" date="1507636800">- Add support for plain old X device configuration
- Resolves: #1515138</changelog>
</package>
<package pkgid="ac13a7eff65d49c747c569bc71f21a29a25d01af17373ddbf6c46df1ceb0b912" name="mutter-devel" arch="x86_64">
  <version epoch="0" ver="3.22.3" rel="12.el7_4"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.22.3-4" date="1489492800">- Don't segfault on early exit
- Resolves: #1369073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.3-5" date="1489579200">- Swizzle BGRA buffers to avoid pixel conversions
- Resolves: #1387025</changelog>
  <changelog author="Owen Taylor &lt;otaylor@redhat.com&gt; - 3.22.3-6" date="1489665600">- Add back quad-buffer stereo patches, rebased to 3.22
- Resolves: #1387025</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.22.3-6" date="1489752000">- Recreate build files after modifying templates with the last patch
- Resolves: #1387025</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-7" date="1493380800">- Fix cally translation of screen coordinates
- Resolves: #1439194</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-8" date="1494936000">- Special-case shaped java windows to fix OpenJDK's compliance test
- Resolves: #1363784</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-9" date="1496923200">- Fix crash when a window closes during Alt+Tab
- Resolves: #1438722</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-10" date="1497441600">- Keep OR windows stacked on top
- Resolves: #1437203</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-11" date="1498478400">- Prevent crash when removing workspace with on-all-workspaces windows
  present (like desktop icons)
- Resolves: #1453065</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.3-12" date="1507636800">- Add support for plain old X device configuration
- Resolves: #1515138</changelog>
</package>
<package pkgid="f99cd25d443256c531fe908ebf9844e56c1e9ce3cbd7b46582cf5b6a2e24c59c" name="nautilus" arch="i686">
  <version epoch="0" ver="3.22.3" rel="4.el7_4"/>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-7" date="1444132800">- Backport two patches from upstream and remove a wrong patch
  Resolves: #1254161 #1266477</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-8" date="1461844800">- Backport fix for jp2 images crashing nautilus
- Apply downstream translations
  Resolves: #1271297 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-9" date="1467374400">- Apply downstream translations
- Restrict icons on desktop to the primary monitor
  Resolves: #1207646 #1046876 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-10" date="1468324800">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-11" date="1469016000">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-12" date="1469016001">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; 3.22.3-1" date="1488974400">- Update to 3.22.3
- Resolves: #1387026</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-2" date="1495022400">- Fix translation files for the remove-autoar patch
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-3" date="1496059200">- Add Japanese translation
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-4" date="1509624000">- Fix desktop files security issue (upstream bugzilla.gnome.org/777991)
 Resolves: #1490949</changelog>
</package>
<package pkgid="5e32820cf6336210e94d9b2a396f83941a3c326b8d39ae0462efa3fcfb017863" name="nautilus" arch="src">
  <version epoch="0" ver="3.22.3" rel="4.el7_4"/>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-7" date="1444132800">- Backport two patches from upstream and remove a wrong patch
  Resolves: #1254161 #1266477</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-8" date="1461844800">- Backport fix for jp2 images crashing nautilus
- Apply downstream translations
  Resolves: #1271297 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-9" date="1467374400">- Apply downstream translations
- Restrict icons on desktop to the primary monitor
  Resolves: #1207646 #1046876 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-10" date="1468324800">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-11" date="1469016000">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-12" date="1469016001">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; 3.22.3-1" date="1488974400">- Update to 3.22.3
- Resolves: #1387026</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-2" date="1495022400">- Fix translation files for the remove-autoar patch
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-3" date="1496059200">- Add Japanese translation
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-4" date="1509624000">- Fix desktop files security issue (upstream bugzilla.gnome.org/777991)
 Resolves: #1490949</changelog>
</package>
<package pkgid="bf9f8781bb7fbd18a4d66d5fb43a98c54bc3af6a322d180f1a8c184eb07a7be0" name="nautilus" arch="src">
  <version epoch="0" ver="3.22.3" rel="4.el7_4"/>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-7" date="1444132800">- Backport two patches from upstream and remove a wrong patch
  Resolves: #1254161 #1266477</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-8" date="1461844800">- Backport fix for jp2 images crashing nautilus
- Apply downstream translations
  Resolves: #1271297 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-9" date="1467374400">- Apply downstream translations
- Restrict icons on desktop to the primary monitor
  Resolves: #1207646 #1046876 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-10" date="1468324800">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-11" date="1469016000">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-12" date="1469016001">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; 3.22.3-1" date="1488974400">- Update to 3.22.3
- Resolves: #1387026</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-2" date="1495022400">- Fix translation files for the remove-autoar patch
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-3" date="1496059200">- Add Japanese translation
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-4" date="1509624000">- Fix desktop files security issue (upstream bugzilla.gnome.org/777991)
 Resolves: #1490949</changelog>
</package>
<package pkgid="3eb381e08287b90a4869801ee579089101b7567a8217905357bfe1b7ef8d0d93" name="nautilus" arch="x86_64">
  <version epoch="0" ver="3.22.3" rel="4.el7_4"/>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-7" date="1444132800">- Backport two patches from upstream and remove a wrong patch
  Resolves: #1254161 #1266477</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-8" date="1461844800">- Backport fix for jp2 images crashing nautilus
- Apply downstream translations
  Resolves: #1271297 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-9" date="1467374400">- Apply downstream translations
- Restrict icons on desktop to the primary monitor
  Resolves: #1207646 #1046876 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-10" date="1468324800">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-11" date="1469016000">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-12" date="1469016001">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; 3.22.3-1" date="1488974400">- Update to 3.22.3
- Resolves: #1387026</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-2" date="1495022400">- Fix translation files for the remove-autoar patch
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-3" date="1496059200">- Add Japanese translation
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-4" date="1509624000">- Fix desktop files security issue (upstream bugzilla.gnome.org/777991)
 Resolves: #1490949</changelog>
</package>
<package pkgid="7022112a3cae5607df966580a2637977fc53f6093f8705f5f68999bbd3d8009e" name="nautilus-debuginfo" arch="i686">
  <version epoch="0" ver="3.22.3" rel="4.el7_4"/>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-7" date="1444132800">- Backport two patches from upstream and remove a wrong patch
  Resolves: #1254161 #1266477</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-8" date="1461844800">- Backport fix for jp2 images crashing nautilus
- Apply downstream translations
  Resolves: #1271297 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-9" date="1467374400">- Apply downstream translations
- Restrict icons on desktop to the primary monitor
  Resolves: #1207646 #1046876 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-10" date="1468324800">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-11" date="1469016000">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-12" date="1469016001">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; 3.22.3-1" date="1488974400">- Update to 3.22.3
- Resolves: #1387026</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-2" date="1495022400">- Fix translation files for the remove-autoar patch
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-3" date="1496059200">- Add Japanese translation
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-4" date="1509624000">- Fix desktop files security issue (upstream bugzilla.gnome.org/777991)
 Resolves: #1490949</changelog>
</package>
<package pkgid="b8c1dce346b989ff802388c29b21233af84e91148126629861dd59295b31af6a" name="nautilus-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.22.3" rel="4.el7_4"/>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-7" date="1444132800">- Backport two patches from upstream and remove a wrong patch
  Resolves: #1254161 #1266477</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-8" date="1461844800">- Backport fix for jp2 images crashing nautilus
- Apply downstream translations
  Resolves: #1271297 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-9" date="1467374400">- Apply downstream translations
- Restrict icons on desktop to the primary monitor
  Resolves: #1207646 #1046876 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-10" date="1468324800">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-11" date="1469016000">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-12" date="1469016001">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; 3.22.3-1" date="1488974400">- Update to 3.22.3
- Resolves: #1387026</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-2" date="1495022400">- Fix translation files for the remove-autoar patch
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-3" date="1496059200">- Add Japanese translation
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-4" date="1509624000">- Fix desktop files security issue (upstream bugzilla.gnome.org/777991)
 Resolves: #1490949</changelog>
</package>
<package pkgid="c8b645f48b0ff015326429e1d413263db142d969f9b1a7c5fcee5463aba87dec" name="nautilus-devel" arch="i686">
  <version epoch="0" ver="3.22.3" rel="4.el7_4"/>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-7" date="1444132800">- Backport two patches from upstream and remove a wrong patch
  Resolves: #1254161 #1266477</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-8" date="1461844800">- Backport fix for jp2 images crashing nautilus
- Apply downstream translations
  Resolves: #1271297 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-9" date="1467374400">- Apply downstream translations
- Restrict icons on desktop to the primary monitor
  Resolves: #1207646 #1046876 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-10" date="1468324800">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-11" date="1469016000">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-12" date="1469016001">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; 3.22.3-1" date="1488974400">- Update to 3.22.3
- Resolves: #1387026</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-2" date="1495022400">- Fix translation files for the remove-autoar patch
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-3" date="1496059200">- Add Japanese translation
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-4" date="1509624000">- Fix desktop files security issue (upstream bugzilla.gnome.org/777991)
 Resolves: #1490949</changelog>
</package>
<package pkgid="45cab2bdbbb869dc57824c31118b6984bf1f93bb236e86a1a34d352fff10ddab" name="nautilus-devel" arch="x86_64">
  <version epoch="0" ver="3.22.3" rel="4.el7_4"/>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-7" date="1444132800">- Backport two patches from upstream and remove a wrong patch
  Resolves: #1254161 #1266477</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-8" date="1461844800">- Backport fix for jp2 images crashing nautilus
- Apply downstream translations
  Resolves: #1271297 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-9" date="1467374400">- Apply downstream translations
- Restrict icons on desktop to the primary monitor
  Resolves: #1207646 #1046876 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-10" date="1468324800">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-11" date="1469016000">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-12" date="1469016001">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; 3.22.3-1" date="1488974400">- Update to 3.22.3
- Resolves: #1387026</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-2" date="1495022400">- Fix translation files for the remove-autoar patch
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-3" date="1496059200">- Add Japanese translation
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-4" date="1509624000">- Fix desktop files security issue (upstream bugzilla.gnome.org/777991)
 Resolves: #1490949</changelog>
</package>
<package pkgid="79dbda55e644526860525e214e6573dbc2c48e6fb06327deb441fb6dd523e899" name="nautilus-extensions" arch="i686">
  <version epoch="0" ver="3.22.3" rel="4.el7_4"/>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-7" date="1444132800">- Backport two patches from upstream and remove a wrong patch
  Resolves: #1254161 #1266477</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-8" date="1461844800">- Backport fix for jp2 images crashing nautilus
- Apply downstream translations
  Resolves: #1271297 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-9" date="1467374400">- Apply downstream translations
- Restrict icons on desktop to the primary monitor
  Resolves: #1207646 #1046876 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-10" date="1468324800">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-11" date="1469016000">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-12" date="1469016001">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; 3.22.3-1" date="1488974400">- Update to 3.22.3
- Resolves: #1387026</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-2" date="1495022400">- Fix translation files for the remove-autoar patch
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-3" date="1496059200">- Add Japanese translation
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-4" date="1509624000">- Fix desktop files security issue (upstream bugzilla.gnome.org/777991)
 Resolves: #1490949</changelog>
</package>
<package pkgid="a4a64bdde3e488fdacdd342102cef204472681c307313a490199302e366dbd12" name="nautilus-extensions" arch="x86_64">
  <version epoch="0" ver="3.22.3" rel="4.el7_4"/>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-7" date="1444132800">- Backport two patches from upstream and remove a wrong patch
  Resolves: #1254161 #1266477</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-8" date="1461844800">- Backport fix for jp2 images crashing nautilus
- Apply downstream translations
  Resolves: #1271297 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-9" date="1467374400">- Apply downstream translations
- Restrict icons on desktop to the primary monitor
  Resolves: #1207646 #1046876 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-10" date="1468324800">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-11" date="1469016000">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-12" date="1469016001">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; 3.22.3-1" date="1488974400">- Update to 3.22.3
- Resolves: #1387026</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-2" date="1495022400">- Fix translation files for the remove-autoar patch
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-3" date="1496059200">- Add Japanese translation
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-4" date="1509624000">- Fix desktop files security issue (upstream bugzilla.gnome.org/777991)
 Resolves: #1490949</changelog>
</package>
<package pkgid="e5ba2d0cb67a4201389cf9ee323935497958a8d36757d4f850831ba7391b93b3" name="ncurses" arch="i686">
  <version epoch="0" ver="5.9" rel="14.20130511.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.9-5.20120204" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-6.20121013" date="1350302400">- update to 20121013
- move st entries to -base
- remove obsolete macros</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-7.20121017" date="1350561600">- update to 20121017</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-8.20130126" date="1359547200">- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-9.20130316" date="1363608000">- update to 20130316
- include shared ncurses C++ libraries (#911540)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-10.20130413" date="1366027200">- update to 20130413</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-11.20130511" date="1368446400">- update to 20130511</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-12.20130511" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-13.20130511" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-14.20130511" date="1502798400">- fix crash in libtinfo initialization (#1426215)</changelog>
</package>
<package pkgid="722601cb65ac56e7e313a87e96d2a251c13b9d84bd1af52ab3b5d3e252834173" name="ncurses" arch="src">
  <version epoch="0" ver="5.9" rel="14.20130511.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.9-5.20120204" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-6.20121013" date="1350302400">- update to 20121013
- move st entries to -base
- remove obsolete macros</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-7.20121017" date="1350561600">- update to 20121017</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-8.20130126" date="1359547200">- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-9.20130316" date="1363608000">- update to 20130316
- include shared ncurses C++ libraries (#911540)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-10.20130413" date="1366027200">- update to 20130413</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-11.20130511" date="1368446400">- update to 20130511</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-12.20130511" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-13.20130511" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-14.20130511" date="1502798400">- fix crash in libtinfo initialization (#1426215)</changelog>
</package>
<package pkgid="fa75bac7b43f09ef65e4d819f9b0397a77b548dc1111e5e3ca5c023d1bc22b6f" name="ncurses" arch="src">
  <version epoch="0" ver="5.9" rel="14.20130511.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.9-5.20120204" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-6.20121013" date="1350302400">- update to 20121013
- move st entries to -base
- remove obsolete macros</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-7.20121017" date="1350561600">- update to 20121017</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-8.20130126" date="1359547200">- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-9.20130316" date="1363608000">- update to 20130316
- include shared ncurses C++ libraries (#911540)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-10.20130413" date="1366027200">- update to 20130413</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-11.20130511" date="1368446400">- update to 20130511</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-12.20130511" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-13.20130511" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-14.20130511" date="1502798400">- fix crash in libtinfo initialization (#1426215)</changelog>
</package>
<package pkgid="8694472997f747c3627a9a67b9d3d79c31bd920037cb5998d0f9ad5354f314c3" name="ncurses" arch="x86_64">
  <version epoch="0" ver="5.9" rel="14.20130511.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.9-5.20120204" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-6.20121013" date="1350302400">- update to 20121013
- move st entries to -base
- remove obsolete macros</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-7.20121017" date="1350561600">- update to 20121017</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-8.20130126" date="1359547200">- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-9.20130316" date="1363608000">- update to 20130316
- include shared ncurses C++ libraries (#911540)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-10.20130413" date="1366027200">- update to 20130413</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-11.20130511" date="1368446400">- update to 20130511</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-12.20130511" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-13.20130511" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-14.20130511" date="1502798400">- fix crash in libtinfo initialization (#1426215)</changelog>
</package>
<package pkgid="033f705ded7f09305bf7c48173db6091ae61edd999815e85641bbef8f166ddd8" name="ncurses-base" arch="noarch">
  <version epoch="0" ver="5.9" rel="14.20130511.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.9-5.20120204" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-6.20121013" date="1350302400">- update to 20121013
- move st entries to -base
- remove obsolete macros</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-7.20121017" date="1350561600">- update to 20121017</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-8.20130126" date="1359547200">- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-9.20130316" date="1363608000">- update to 20130316
- include shared ncurses C++ libraries (#911540)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-10.20130413" date="1366027200">- update to 20130413</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-11.20130511" date="1368446400">- update to 20130511</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-12.20130511" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-13.20130511" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-14.20130511" date="1502798400">- fix crash in libtinfo initialization (#1426215)</changelog>
</package>
<package pkgid="bd0b8d8cc6a66d2b62a805ce8b3e24332697ae99524dc6beac37559d85ea7070" name="ncurses-base" arch="noarch">
  <version epoch="0" ver="5.9" rel="14.20130511.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.9-5.20120204" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-6.20121013" date="1350302400">- update to 20121013
- move st entries to -base
- remove obsolete macros</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-7.20121017" date="1350561600">- update to 20121017</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-8.20130126" date="1359547200">- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-9.20130316" date="1363608000">- update to 20130316
- include shared ncurses C++ libraries (#911540)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-10.20130413" date="1366027200">- update to 20130413</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-11.20130511" date="1368446400">- update to 20130511</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-12.20130511" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-13.20130511" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-14.20130511" date="1502798400">- fix crash in libtinfo initialization (#1426215)</changelog>
</package>
<package pkgid="5c11629df60468d7cf403eb0d01288b94ea62fda03ed2f8bbe307aaea083ccf4" name="ncurses-debuginfo" arch="i686">
  <version epoch="0" ver="5.9" rel="14.20130511.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.9-5.20120204" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-6.20121013" date="1350302400">- update to 20121013
- move st entries to -base
- remove obsolete macros</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-7.20121017" date="1350561600">- update to 20121017</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-8.20130126" date="1359547200">- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-9.20130316" date="1363608000">- update to 20130316
- include shared ncurses C++ libraries (#911540)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-10.20130413" date="1366027200">- update to 20130413</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-11.20130511" date="1368446400">- update to 20130511</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-12.20130511" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-13.20130511" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-14.20130511" date="1502798400">- fix crash in libtinfo initialization (#1426215)</changelog>
</package>
<package pkgid="b2c1eed81066494a0a86d14721943935343a3c32591da9dfda007cc01992a254" name="ncurses-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.9" rel="14.20130511.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.9-5.20120204" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-6.20121013" date="1350302400">- update to 20121013
- move st entries to -base
- remove obsolete macros</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-7.20121017" date="1350561600">- update to 20121017</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-8.20130126" date="1359547200">- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-9.20130316" date="1363608000">- update to 20130316
- include shared ncurses C++ libraries (#911540)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-10.20130413" date="1366027200">- update to 20130413</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-11.20130511" date="1368446400">- update to 20130511</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-12.20130511" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-13.20130511" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-14.20130511" date="1502798400">- fix crash in libtinfo initialization (#1426215)</changelog>
</package>
<package pkgid="394e64130a792b284b5782a22ceeebd758b7504dd38aa1f5d8d08ed2ea42bba0" name="ncurses-devel" arch="i686">
  <version epoch="0" ver="5.9" rel="14.20130511.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.9-5.20120204" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-6.20121013" date="1350302400">- update to 20121013
- move st entries to -base
- remove obsolete macros</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-7.20121017" date="1350561600">- update to 20121017</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-8.20130126" date="1359547200">- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-9.20130316" date="1363608000">- update to 20130316
- include shared ncurses C++ libraries (#911540)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-10.20130413" date="1366027200">- update to 20130413</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-11.20130511" date="1368446400">- update to 20130511</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-12.20130511" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-13.20130511" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-14.20130511" date="1502798400">- fix crash in libtinfo initialization (#1426215)</changelog>
</package>
<package pkgid="bb0e1780e31c4c5d97dc412c06921753ee08b6cf351f7542118de39bd42b9932" name="ncurses-devel" arch="x86_64">
  <version epoch="0" ver="5.9" rel="14.20130511.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.9-5.20120204" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-6.20121013" date="1350302400">- update to 20121013
- move st entries to -base
- remove obsolete macros</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-7.20121017" date="1350561600">- update to 20121017</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-8.20130126" date="1359547200">- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-9.20130316" date="1363608000">- update to 20130316
- include shared ncurses C++ libraries (#911540)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-10.20130413" date="1366027200">- update to 20130413</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-11.20130511" date="1368446400">- update to 20130511</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-12.20130511" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-13.20130511" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-14.20130511" date="1502798400">- fix crash in libtinfo initialization (#1426215)</changelog>
</package>
<package pkgid="8974e144752fd9dd726f4d09edbe5d305a9ff5758dab0204f3f91655daae55d2" name="ncurses-libs" arch="i686">
  <version epoch="0" ver="5.9" rel="14.20130511.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.9-5.20120204" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-6.20121013" date="1350302400">- update to 20121013
- move st entries to -base
- remove obsolete macros</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-7.20121017" date="1350561600">- update to 20121017</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-8.20130126" date="1359547200">- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-9.20130316" date="1363608000">- update to 20130316
- include shared ncurses C++ libraries (#911540)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-10.20130413" date="1366027200">- update to 20130413</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-11.20130511" date="1368446400">- update to 20130511</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-12.20130511" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-13.20130511" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-14.20130511" date="1502798400">- fix crash in libtinfo initialization (#1426215)</changelog>
</package>
<package pkgid="220b5c8337d008bd544536a6f9049b46b0b8fae840be024fb5b7078f457f8dbc" name="ncurses-libs" arch="x86_64">
  <version epoch="0" ver="5.9" rel="14.20130511.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.9-5.20120204" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-6.20121013" date="1350302400">- update to 20121013
- move st entries to -base
- remove obsolete macros</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-7.20121017" date="1350561600">- update to 20121017</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-8.20130126" date="1359547200">- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-9.20130316" date="1363608000">- update to 20130316
- include shared ncurses C++ libraries (#911540)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-10.20130413" date="1366027200">- update to 20130413</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-11.20130511" date="1368446400">- update to 20130511</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-12.20130511" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-13.20130511" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-14.20130511" date="1502798400">- fix crash in libtinfo initialization (#1426215)</changelog>
</package>
<package pkgid="117c427d29ea7e9b5382513b9a47bd6b6b3a8cd5a3b9891d91688cfcfc39f4d7" name="ncurses-static" arch="i686">
  <version epoch="0" ver="5.9" rel="14.20130511.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.9-5.20120204" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-6.20121013" date="1350302400">- update to 20121013
- move st entries to -base
- remove obsolete macros</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-7.20121017" date="1350561600">- update to 20121017</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-8.20130126" date="1359547200">- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-9.20130316" date="1363608000">- update to 20130316
- include shared ncurses C++ libraries (#911540)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-10.20130413" date="1366027200">- update to 20130413</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-11.20130511" date="1368446400">- update to 20130511</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-12.20130511" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-13.20130511" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-14.20130511" date="1502798400">- fix crash in libtinfo initialization (#1426215)</changelog>
</package>
<package pkgid="863fcb745aed8976ecf2a69796417f3c3f0f7300e5875f9a15416bd0fd76fc00" name="ncurses-static" arch="x86_64">
  <version epoch="0" ver="5.9" rel="14.20130511.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.9-5.20120204" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-6.20121013" date="1350302400">- update to 20121013
- move st entries to -base
- remove obsolete macros</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-7.20121017" date="1350561600">- update to 20121017</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-8.20130126" date="1359547200">- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-9.20130316" date="1363608000">- update to 20130316
- include shared ncurses C++ libraries (#911540)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-10.20130413" date="1366027200">- update to 20130413</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-11.20130511" date="1368446400">- update to 20130511</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-12.20130511" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-13.20130511" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-14.20130511" date="1502798400">- fix crash in libtinfo initialization (#1426215)</changelog>
</package>
<package pkgid="c0aaca18c260c6ee4924d5ad23065bcaa1fb0bdf4f970644823032bf62f36f38" name="ncurses-term" arch="noarch">
  <version epoch="0" ver="5.9" rel="14.20130511.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.9-5.20120204" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-6.20121013" date="1350302400">- update to 20121013
- move st entries to -base
- remove obsolete macros</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-7.20121017" date="1350561600">- update to 20121017</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-8.20130126" date="1359547200">- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-9.20130316" date="1363608000">- update to 20130316
- include shared ncurses C++ libraries (#911540)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-10.20130413" date="1366027200">- update to 20130413</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-11.20130511" date="1368446400">- update to 20130511</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-12.20130511" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-13.20130511" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-14.20130511" date="1502798400">- fix crash in libtinfo initialization (#1426215)</changelog>
</package>
<package pkgid="8f633cd30e401ceaac57386c3bde3c3b7c0184587ca849df8f4e33b1c5d8f57d" name="ncurses-term" arch="noarch">
  <version epoch="0" ver="5.9" rel="14.20130511.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.9-5.20120204" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-6.20121013" date="1350302400">- update to 20121013
- move st entries to -base
- remove obsolete macros</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-7.20121017" date="1350561600">- update to 20121017</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-8.20130126" date="1359547200">- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-9.20130316" date="1363608000">- update to 20130316
- include shared ncurses C++ libraries (#911540)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-10.20130413" date="1366027200">- update to 20130413</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-11.20130511" date="1368446400">- update to 20130511</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-12.20130511" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-13.20130511" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-14.20130511" date="1502798400">- fix crash in libtinfo initialization (#1426215)</changelog>
</package>
<package pkgid="9bca1b18b6b4f819add48b386293635a5fd3f16c9309a3938ef5ad5f12c9f246" name="net-snmp" arch="i686">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="4ed781570edc962404ef59b6c65548394776a20c75f15c965853c84547478c3d" name="net-snmp" arch="src">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="cde66b8cd2be0f4cc7a250b56433b5d3d41060de0f72af563284543778c4cb40" name="net-snmp" arch="src">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="fb940af3355205b0361c2d54f0e8ab671220577268d8660f3dbd1b43e8526955" name="net-snmp" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="03c24fda91ff3a0b82eae69adff92fbd1c02cd86b10968cfd7922bd2e672d22a" name="net-snmp-agent-libs" arch="i686">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="ad3735c5fa84f090611d3bd88df3fa386eb2b2b89f68e88ba75cdc683852c297" name="net-snmp-agent-libs" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="4aee285ab55b3917657e47ad723957699c129bed6caeaf0202091c841789907e" name="net-snmp-debuginfo" arch="i686">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="bf77cd615d43fc4b2f2c2c7b98b32e4fbb33264d5918cf0d0e4bf2677e5a34e0" name="net-snmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="ee85262b3e26327ca183776f5ace9197cfad28768a99791117007065f64d09a7" name="net-snmp-devel" arch="i686">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="64b387213e23b3814923b06e4abdaae5be68201d1f3882df43df5bae392dc5f3" name="net-snmp-devel" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="77865e6cbb5d1e5b61eea135e816f3eee3080dc365630f871433cb40fbf8ab0f" name="net-snmp-gui" arch="i686">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="6d07d23b106c0899ef849f8ac8a77dee5c6090bee3520118cda634bd25b04020" name="net-snmp-gui" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="0ae87a5b44d01d9ce772527c3ccfd2976d83045cbd9c56d688169c70ca9ae2d3" name="net-snmp-libs" arch="i686">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="05a60fc5e3f62c55caaf0b9534e53c8bec3f1cae1dee37452b9d85cf64c54800" name="net-snmp-libs" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="e7e068c771c02211d867295585ab30124b959f341f321774fd947978f1df7d67" name="net-snmp-perl" arch="i686">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="12d0f98b2d1d72efefa972c7ea5c7b41bfe2d5c9c1325109a2609067c6da164f" name="net-snmp-perl" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="ae60dc4e09d271ac22d6b8138adb87b946d0bc62dbed344cb73f4ad4d36d1257" name="net-snmp-python" arch="i686">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="6d835da5e4a33707d0d95dfa355c58b5e18b897e65042a678593820247f4750f" name="net-snmp-python" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="265483612367b97ec454ca26d69634ba62bba7f9cb7f1197ed3c81446838cb2f" name="net-snmp-sysvinit" arch="i686">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="8968753d435e018908d944a21ed93e57e4d4233fd76fe8aa609bd3e50b809e8d" name="net-snmp-sysvinit" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="01d94f18869f53c6425e54a1dd210d8da111382023fe055ef8083acb462e0872" name="net-snmp-utils" arch="i686">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="34731ec17526a072dd3a2a613a4be50526042354b0e8bac231ad07b8f445d04c" name="net-snmp-utils" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="c8218a877793e590eb09303713741af24ff8d003d1c1452fcb9643a50dfd38f0" name="nfs-utils" arch="i686">
  <version epoch="1" ver="1.3.0" rel="0.48.el7_4.1"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.41" date="1493294400">- nfsdcltrack: silence some expected errors (bz 1443176)
- Conditionally restart gssproxy now that config file is installed (bz 1440887)
- systemd: NFS server services should use network-online (bz 1409012)
- Cleaned up some fuzzy patches (bz 1409012)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.42" date="1494331200">- Removed RPCSVCGSSDARGS nfs.sysconfig (bz 1431218)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.43" date="1495454400">- mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
- spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.44" date="1496318400">- Updated patch for bz 1447849 with the upstream version (bz 1447849)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.45" date="1496836800">- Restart gssproxy when the server is reloaded (bz 1459483)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.46" date="1497268800">- Use v4 minor default on all v4 mount types (bz 1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.47" date="1497441600">- mount.nfs: Restore errno after v3 mounts on ECONNREFUSED errors (bz 1404121)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48" date="1497873600">- exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
- Correctly set the minor version when set in nfsmount.conf (1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4" date="1507291200">- rpc.nfsd: Do not fail when all address families are not support (bz 1450528)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.1" date="1512043200">- mount: handle EACCES during version negotiation (bz 1518718)</changelog>
</package>
<package pkgid="071edd71f9fe6cfed71e87828e666dfc154c5dd6ca56a8376eea738155072b02" name="nfs-utils" arch="src">
  <version epoch="1" ver="1.3.0" rel="0.48.el7_4.1"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.41" date="1493294400">- nfsdcltrack: silence some expected errors (bz 1443176)
- Conditionally restart gssproxy now that config file is installed (bz 1440887)
- systemd: NFS server services should use network-online (bz 1409012)
- Cleaned up some fuzzy patches (bz 1409012)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.42" date="1494331200">- Removed RPCSVCGSSDARGS nfs.sysconfig (bz 1431218)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.43" date="1495454400">- mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
- spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.44" date="1496318400">- Updated patch for bz 1447849 with the upstream version (bz 1447849)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.45" date="1496836800">- Restart gssproxy when the server is reloaded (bz 1459483)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.46" date="1497268800">- Use v4 minor default on all v4 mount types (bz 1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.47" date="1497441600">- mount.nfs: Restore errno after v3 mounts on ECONNREFUSED errors (bz 1404121)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48" date="1497873600">- exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
- Correctly set the minor version when set in nfsmount.conf (1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4" date="1507291200">- rpc.nfsd: Do not fail when all address families are not support (bz 1450528)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.1" date="1512043200">- mount: handle EACCES during version negotiation (bz 1518718)</changelog>
</package>
<package pkgid="9b508f50ace1d58cfaf8a649ba2dc10efa53f3f6f4843d3ae4503a57dcb405a0" name="nfs-utils" arch="src">
  <version epoch="1" ver="1.3.0" rel="0.48.el7_4.1"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.41" date="1493294400">- nfsdcltrack: silence some expected errors (bz 1443176)
- Conditionally restart gssproxy now that config file is installed (bz 1440887)
- systemd: NFS server services should use network-online (bz 1409012)
- Cleaned up some fuzzy patches (bz 1409012)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.42" date="1494331200">- Removed RPCSVCGSSDARGS nfs.sysconfig (bz 1431218)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.43" date="1495454400">- mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
- spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.44" date="1496318400">- Updated patch for bz 1447849 with the upstream version (bz 1447849)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.45" date="1496836800">- Restart gssproxy when the server is reloaded (bz 1459483)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.46" date="1497268800">- Use v4 minor default on all v4 mount types (bz 1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.47" date="1497441600">- mount.nfs: Restore errno after v3 mounts on ECONNREFUSED errors (bz 1404121)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48" date="1497873600">- exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
- Correctly set the minor version when set in nfsmount.conf (1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4" date="1507291200">- rpc.nfsd: Do not fail when all address families are not support (bz 1450528)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.1" date="1512043200">- mount: handle EACCES during version negotiation (bz 1518718)</changelog>
</package>
<package pkgid="64924748e1102df9c09ce66091744dc87c21f95bb243c9dfabf67b2db6cce2a5" name="nfs-utils" arch="x86_64">
  <version epoch="1" ver="1.3.0" rel="0.48.el7_4.1"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.41" date="1493294400">- nfsdcltrack: silence some expected errors (bz 1443176)
- Conditionally restart gssproxy now that config file is installed (bz 1440887)
- systemd: NFS server services should use network-online (bz 1409012)
- Cleaned up some fuzzy patches (bz 1409012)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.42" date="1494331200">- Removed RPCSVCGSSDARGS nfs.sysconfig (bz 1431218)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.43" date="1495454400">- mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
- spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.44" date="1496318400">- Updated patch for bz 1447849 with the upstream version (bz 1447849)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.45" date="1496836800">- Restart gssproxy when the server is reloaded (bz 1459483)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.46" date="1497268800">- Use v4 minor default on all v4 mount types (bz 1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.47" date="1497441600">- mount.nfs: Restore errno after v3 mounts on ECONNREFUSED errors (bz 1404121)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48" date="1497873600">- exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
- Correctly set the minor version when set in nfsmount.conf (1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4" date="1507291200">- rpc.nfsd: Do not fail when all address families are not support (bz 1450528)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.1" date="1512043200">- mount: handle EACCES during version negotiation (bz 1518718)</changelog>
</package>
<package pkgid="20c63001db81886752bd573ab52ec4c53cf3c0ae621f0c6a477314cadc33fe14" name="nfs-utils" arch="i686">
  <version epoch="1" ver="1.3.0" rel="0.48.el7_4.2"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.42" date="1494331200">- Removed RPCSVCGSSDARGS nfs.sysconfig (bz 1431218)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.43" date="1495454400">- mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
- spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.44" date="1496318400">- Updated patch for bz 1447849 with the upstream version (bz 1447849)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.45" date="1496836800">- Restart gssproxy when the server is reloaded (bz 1459483)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.46" date="1497268800">- Use v4 minor default on all v4 mount types (bz 1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.47" date="1497441600">- mount.nfs: Restore errno after v3 mounts on ECONNREFUSED errors (bz 1404121)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48" date="1497873600">- exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
- Correctly set the minor version when set in nfsmount.conf (1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4" date="1507291200">- rpc.nfsd: Do not fail when all address families are not support (bz 1450528)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.1" date="1512043200">- mount: handle EACCES during version negotiation (bz 1518718)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.2" date="1519300800">- mount: Fix problems with parsing minorversion= (bz 1547681)</changelog>
</package>
<package pkgid="2423a8b7cd4f0f6c653bc8d724222c516adf08cd57cbb8bf41790942fcaabe1c" name="nfs-utils" arch="src">
  <version epoch="1" ver="1.3.0" rel="0.48.el7_4.2"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.42" date="1494331200">- Removed RPCSVCGSSDARGS nfs.sysconfig (bz 1431218)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.43" date="1495454400">- mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
- spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.44" date="1496318400">- Updated patch for bz 1447849 with the upstream version (bz 1447849)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.45" date="1496836800">- Restart gssproxy when the server is reloaded (bz 1459483)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.46" date="1497268800">- Use v4 minor default on all v4 mount types (bz 1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.47" date="1497441600">- mount.nfs: Restore errno after v3 mounts on ECONNREFUSED errors (bz 1404121)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48" date="1497873600">- exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
- Correctly set the minor version when set in nfsmount.conf (1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4" date="1507291200">- rpc.nfsd: Do not fail when all address families are not support (bz 1450528)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.1" date="1512043200">- mount: handle EACCES during version negotiation (bz 1518718)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.2" date="1519300800">- mount: Fix problems with parsing minorversion= (bz 1547681)</changelog>
</package>
<package pkgid="7d1b77d0c7e2c8ca89e365d7029e6a1f49c7ceb27dc27486dcd3a3ca98cafc88" name="nfs-utils" arch="src">
  <version epoch="1" ver="1.3.0" rel="0.48.el7_4.2"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.42" date="1494331200">- Removed RPCSVCGSSDARGS nfs.sysconfig (bz 1431218)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.43" date="1495454400">- mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
- spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.44" date="1496318400">- Updated patch for bz 1447849 with the upstream version (bz 1447849)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.45" date="1496836800">- Restart gssproxy when the server is reloaded (bz 1459483)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.46" date="1497268800">- Use v4 minor default on all v4 mount types (bz 1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.47" date="1497441600">- mount.nfs: Restore errno after v3 mounts on ECONNREFUSED errors (bz 1404121)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48" date="1497873600">- exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
- Correctly set the minor version when set in nfsmount.conf (1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4" date="1507291200">- rpc.nfsd: Do not fail when all address families are not support (bz 1450528)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.1" date="1512043200">- mount: handle EACCES during version negotiation (bz 1518718)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.2" date="1519300800">- mount: Fix problems with parsing minorversion= (bz 1547681)</changelog>
</package>
<package pkgid="9003da883ddcf03b2beeca695c1f1217edd8b788e355540af2292bcd39a21a6c" name="nfs-utils" arch="x86_64">
  <version epoch="1" ver="1.3.0" rel="0.48.el7_4.2"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.42" date="1494331200">- Removed RPCSVCGSSDARGS nfs.sysconfig (bz 1431218)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.43" date="1495454400">- mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
- spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.44" date="1496318400">- Updated patch for bz 1447849 with the upstream version (bz 1447849)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.45" date="1496836800">- Restart gssproxy when the server is reloaded (bz 1459483)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.46" date="1497268800">- Use v4 minor default on all v4 mount types (bz 1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.47" date="1497441600">- mount.nfs: Restore errno after v3 mounts on ECONNREFUSED errors (bz 1404121)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48" date="1497873600">- exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
- Correctly set the minor version when set in nfsmount.conf (1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4" date="1507291200">- rpc.nfsd: Do not fail when all address families are not support (bz 1450528)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.1" date="1512043200">- mount: handle EACCES during version negotiation (bz 1518718)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.2" date="1519300800">- mount: Fix problems with parsing minorversion= (bz 1547681)</changelog>
</package>
<package pkgid="db620f1398ec077fedb6942fe44e1290a9ec860a6be5c9a0f0cd07b5a7d13f8c" name="nfs-utils" arch="i686">
  <version epoch="1" ver="1.3.0" rel="0.48.el7_4"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.40" date="1491652800">- gssd: ensure that preferred_realm is non-NULL (bz 1432643)
- mountstats: handle KeyError in accumulate_iostats() (bz 1400106)
- mount: RPC_PROGNOTREGISTERED should not be a permanent error (bz 1404121)
- sm-notify: ending the grace period early should be configurable (bz 1424599)
- Fixed a couple typos that effected the '--mounts' nfsstat option (bz 1425956)
- Manual page bug: two inaccuracies in nfsd(7) (bz 1432750)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.41" date="1493294400">- nfsdcltrack: silence some expected errors (bz 1443176)
- Conditionally restart gssproxy now that config file is installed (bz 1440887)
- systemd: NFS server services should use network-online (bz 1409012)
- Cleaned up some fuzzy patches (bz 1409012)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.42" date="1494331200">- Removed RPCSVCGSSDARGS nfs.sysconfig (bz 1431218)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.43" date="1495454400">- mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
- spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.44" date="1496318400">- Updated patch for bz 1447849 with the upstream version (bz 1447849)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.45" date="1496836800">- Restart gssproxy when the server is reloaded (bz 1459483)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.46" date="1497268800">- Use v4 minor default on all v4 mount types (bz 1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.47" date="1497441600">- mount.nfs: Restore errno after v3 mounts on ECONNREFUSED errors (bz 1404121)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48" date="1497873600">- exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
- Correctly set the minor version when set in nfsmount.conf (1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4" date="1507291200">- rpc.nfsd: Do not fail when all address families are not support (bz 1450528)</changelog>
</package>
<package pkgid="cb7c730331522721fcb8bc1d69c96929c372a3e051499b31fe9d35f465d8120d" name="nfs-utils" arch="src">
  <version epoch="1" ver="1.3.0" rel="0.48.el7_4"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.40" date="1491652800">- gssd: ensure that preferred_realm is non-NULL (bz 1432643)
- mountstats: handle KeyError in accumulate_iostats() (bz 1400106)
- mount: RPC_PROGNOTREGISTERED should not be a permanent error (bz 1404121)
- sm-notify: ending the grace period early should be configurable (bz 1424599)
- Fixed a couple typos that effected the '--mounts' nfsstat option (bz 1425956)
- Manual page bug: two inaccuracies in nfsd(7) (bz 1432750)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.41" date="1493294400">- nfsdcltrack: silence some expected errors (bz 1443176)
- Conditionally restart gssproxy now that config file is installed (bz 1440887)
- systemd: NFS server services should use network-online (bz 1409012)
- Cleaned up some fuzzy patches (bz 1409012)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.42" date="1494331200">- Removed RPCSVCGSSDARGS nfs.sysconfig (bz 1431218)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.43" date="1495454400">- mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
- spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.44" date="1496318400">- Updated patch for bz 1447849 with the upstream version (bz 1447849)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.45" date="1496836800">- Restart gssproxy when the server is reloaded (bz 1459483)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.46" date="1497268800">- Use v4 minor default on all v4 mount types (bz 1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.47" date="1497441600">- mount.nfs: Restore errno after v3 mounts on ECONNREFUSED errors (bz 1404121)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48" date="1497873600">- exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
- Correctly set the minor version when set in nfsmount.conf (1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4" date="1507291200">- rpc.nfsd: Do not fail when all address families are not support (bz 1450528)</changelog>
</package>
<package pkgid="3744fff2aa1543d867950034566c3d14d54b7253ff2f521a2db1a4e66a4f274a" name="nfs-utils" arch="src">
  <version epoch="1" ver="1.3.0" rel="0.48.el7_4"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.40" date="1491652800">- gssd: ensure that preferred_realm is non-NULL (bz 1432643)
- mountstats: handle KeyError in accumulate_iostats() (bz 1400106)
- mount: RPC_PROGNOTREGISTERED should not be a permanent error (bz 1404121)
- sm-notify: ending the grace period early should be configurable (bz 1424599)
- Fixed a couple typos that effected the '--mounts' nfsstat option (bz 1425956)
- Manual page bug: two inaccuracies in nfsd(7) (bz 1432750)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.41" date="1493294400">- nfsdcltrack: silence some expected errors (bz 1443176)
- Conditionally restart gssproxy now that config file is installed (bz 1440887)
- systemd: NFS server services should use network-online (bz 1409012)
- Cleaned up some fuzzy patches (bz 1409012)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.42" date="1494331200">- Removed RPCSVCGSSDARGS nfs.sysconfig (bz 1431218)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.43" date="1495454400">- mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
- spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.44" date="1496318400">- Updated patch for bz 1447849 with the upstream version (bz 1447849)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.45" date="1496836800">- Restart gssproxy when the server is reloaded (bz 1459483)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.46" date="1497268800">- Use v4 minor default on all v4 mount types (bz 1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.47" date="1497441600">- mount.nfs: Restore errno after v3 mounts on ECONNREFUSED errors (bz 1404121)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48" date="1497873600">- exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
- Correctly set the minor version when set in nfsmount.conf (1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4" date="1507291200">- rpc.nfsd: Do not fail when all address families are not support (bz 1450528)</changelog>
</package>
<package pkgid="4845942c625951f6b00e93466bbaed7febfd33621dae15d9231d5a66f3e1224c" name="nfs-utils" arch="x86_64">
  <version epoch="1" ver="1.3.0" rel="0.48.el7_4"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.40" date="1491652800">- gssd: ensure that preferred_realm is non-NULL (bz 1432643)
- mountstats: handle KeyError in accumulate_iostats() (bz 1400106)
- mount: RPC_PROGNOTREGISTERED should not be a permanent error (bz 1404121)
- sm-notify: ending the grace period early should be configurable (bz 1424599)
- Fixed a couple typos that effected the '--mounts' nfsstat option (bz 1425956)
- Manual page bug: two inaccuracies in nfsd(7) (bz 1432750)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.41" date="1493294400">- nfsdcltrack: silence some expected errors (bz 1443176)
- Conditionally restart gssproxy now that config file is installed (bz 1440887)
- systemd: NFS server services should use network-online (bz 1409012)
- Cleaned up some fuzzy patches (bz 1409012)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.42" date="1494331200">- Removed RPCSVCGSSDARGS nfs.sysconfig (bz 1431218)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.43" date="1495454400">- mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
- spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.44" date="1496318400">- Updated patch for bz 1447849 with the upstream version (bz 1447849)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.45" date="1496836800">- Restart gssproxy when the server is reloaded (bz 1459483)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.46" date="1497268800">- Use v4 minor default on all v4 mount types (bz 1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.47" date="1497441600">- mount.nfs: Restore errno after v3 mounts on ECONNREFUSED errors (bz 1404121)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48" date="1497873600">- exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
- Correctly set the minor version when set in nfsmount.conf (1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4" date="1507291200">- rpc.nfsd: Do not fail when all address families are not support (bz 1450528)</changelog>
</package>
<package pkgid="70c1dd50a5875116dce403919b86aa2895c61ed60a2c3f11aa744f565fefec46" name="nfs-utils-debuginfo" arch="i686">
  <version epoch="1" ver="1.3.0" rel="0.48.el7_4.1"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.41" date="1493294400">- nfsdcltrack: silence some expected errors (bz 1443176)
- Conditionally restart gssproxy now that config file is installed (bz 1440887)
- systemd: NFS server services should use network-online (bz 1409012)
- Cleaned up some fuzzy patches (bz 1409012)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.42" date="1494331200">- Removed RPCSVCGSSDARGS nfs.sysconfig (bz 1431218)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.43" date="1495454400">- mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
- spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.44" date="1496318400">- Updated patch for bz 1447849 with the upstream version (bz 1447849)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.45" date="1496836800">- Restart gssproxy when the server is reloaded (bz 1459483)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.46" date="1497268800">- Use v4 minor default on all v4 mount types (bz 1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.47" date="1497441600">- mount.nfs: Restore errno after v3 mounts on ECONNREFUSED errors (bz 1404121)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48" date="1497873600">- exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
- Correctly set the minor version when set in nfsmount.conf (1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4" date="1507291200">- rpc.nfsd: Do not fail when all address families are not support (bz 1450528)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.1" date="1512043200">- mount: handle EACCES during version negotiation (bz 1518718)</changelog>
</package>
<package pkgid="a0dc74ecacd4a675b9d4f274fc611154547cbcfa4f68354b977d098b3e9b1e29" name="nfs-utils-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.3.0" rel="0.48.el7_4.1"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.41" date="1493294400">- nfsdcltrack: silence some expected errors (bz 1443176)
- Conditionally restart gssproxy now that config file is installed (bz 1440887)
- systemd: NFS server services should use network-online (bz 1409012)
- Cleaned up some fuzzy patches (bz 1409012)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.42" date="1494331200">- Removed RPCSVCGSSDARGS nfs.sysconfig (bz 1431218)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.43" date="1495454400">- mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
- spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.44" date="1496318400">- Updated patch for bz 1447849 with the upstream version (bz 1447849)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.45" date="1496836800">- Restart gssproxy when the server is reloaded (bz 1459483)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.46" date="1497268800">- Use v4 minor default on all v4 mount types (bz 1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.47" date="1497441600">- mount.nfs: Restore errno after v3 mounts on ECONNREFUSED errors (bz 1404121)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48" date="1497873600">- exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
- Correctly set the minor version when set in nfsmount.conf (1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4" date="1507291200">- rpc.nfsd: Do not fail when all address families are not support (bz 1450528)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.1" date="1512043200">- mount: handle EACCES during version negotiation (bz 1518718)</changelog>
</package>
<package pkgid="06bff27201aabbe4c53a563f8e122d2b7731a43934e5fedfff78427f71218395" name="nfs-utils-debuginfo" arch="i686">
  <version epoch="1" ver="1.3.0" rel="0.48.el7_4.2"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.42" date="1494331200">- Removed RPCSVCGSSDARGS nfs.sysconfig (bz 1431218)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.43" date="1495454400">- mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
- spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.44" date="1496318400">- Updated patch for bz 1447849 with the upstream version (bz 1447849)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.45" date="1496836800">- Restart gssproxy when the server is reloaded (bz 1459483)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.46" date="1497268800">- Use v4 minor default on all v4 mount types (bz 1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.47" date="1497441600">- mount.nfs: Restore errno after v3 mounts on ECONNREFUSED errors (bz 1404121)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48" date="1497873600">- exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
- Correctly set the minor version when set in nfsmount.conf (1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4" date="1507291200">- rpc.nfsd: Do not fail when all address families are not support (bz 1450528)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.1" date="1512043200">- mount: handle EACCES during version negotiation (bz 1518718)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.2" date="1519300800">- mount: Fix problems with parsing minorversion= (bz 1547681)</changelog>
</package>
<package pkgid="256fdd3d9f0ab6cdb67ba20874c02a691006d2c8c7d2272cb67535cb0dc6302f" name="nfs-utils-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.3.0" rel="0.48.el7_4.2"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.42" date="1494331200">- Removed RPCSVCGSSDARGS nfs.sysconfig (bz 1431218)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.43" date="1495454400">- mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
- spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.44" date="1496318400">- Updated patch for bz 1447849 with the upstream version (bz 1447849)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.45" date="1496836800">- Restart gssproxy when the server is reloaded (bz 1459483)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.46" date="1497268800">- Use v4 minor default on all v4 mount types (bz 1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.47" date="1497441600">- mount.nfs: Restore errno after v3 mounts on ECONNREFUSED errors (bz 1404121)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48" date="1497873600">- exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
- Correctly set the minor version when set in nfsmount.conf (1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4" date="1507291200">- rpc.nfsd: Do not fail when all address families are not support (bz 1450528)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.1" date="1512043200">- mount: handle EACCES during version negotiation (bz 1518718)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.2" date="1519300800">- mount: Fix problems with parsing minorversion= (bz 1547681)</changelog>
</package>
<package pkgid="1e008c5f08dd685a0066cfa2f85451f24ce95ea558c1333f2a30bc5db8b5f68e" name="nfs-utils-debuginfo" arch="i686">
  <version epoch="1" ver="1.3.0" rel="0.48.el7_4"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.40" date="1491652800">- gssd: ensure that preferred_realm is non-NULL (bz 1432643)
- mountstats: handle KeyError in accumulate_iostats() (bz 1400106)
- mount: RPC_PROGNOTREGISTERED should not be a permanent error (bz 1404121)
- sm-notify: ending the grace period early should be configurable (bz 1424599)
- Fixed a couple typos that effected the '--mounts' nfsstat option (bz 1425956)
- Manual page bug: two inaccuracies in nfsd(7) (bz 1432750)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.41" date="1493294400">- nfsdcltrack: silence some expected errors (bz 1443176)
- Conditionally restart gssproxy now that config file is installed (bz 1440887)
- systemd: NFS server services should use network-online (bz 1409012)
- Cleaned up some fuzzy patches (bz 1409012)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.42" date="1494331200">- Removed RPCSVCGSSDARGS nfs.sysconfig (bz 1431218)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.43" date="1495454400">- mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
- spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.44" date="1496318400">- Updated patch for bz 1447849 with the upstream version (bz 1447849)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.45" date="1496836800">- Restart gssproxy when the server is reloaded (bz 1459483)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.46" date="1497268800">- Use v4 minor default on all v4 mount types (bz 1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.47" date="1497441600">- mount.nfs: Restore errno after v3 mounts on ECONNREFUSED errors (bz 1404121)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48" date="1497873600">- exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
- Correctly set the minor version when set in nfsmount.conf (1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4" date="1507291200">- rpc.nfsd: Do not fail when all address families are not support (bz 1450528)</changelog>
</package>
<package pkgid="99a524e3ca82699cab7781871d2241ade21006c4edea2190b62e289fd9c93097" name="nfs-utils-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.3.0" rel="0.48.el7_4"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.40" date="1491652800">- gssd: ensure that preferred_realm is non-NULL (bz 1432643)
- mountstats: handle KeyError in accumulate_iostats() (bz 1400106)
- mount: RPC_PROGNOTREGISTERED should not be a permanent error (bz 1404121)
- sm-notify: ending the grace period early should be configurable (bz 1424599)
- Fixed a couple typos that effected the '--mounts' nfsstat option (bz 1425956)
- Manual page bug: two inaccuracies in nfsd(7) (bz 1432750)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.41" date="1493294400">- nfsdcltrack: silence some expected errors (bz 1443176)
- Conditionally restart gssproxy now that config file is installed (bz 1440887)
- systemd: NFS server services should use network-online (bz 1409012)
- Cleaned up some fuzzy patches (bz 1409012)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.42" date="1494331200">- Removed RPCSVCGSSDARGS nfs.sysconfig (bz 1431218)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.43" date="1495454400">- mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
- spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.44" date="1496318400">- Updated patch for bz 1447849 with the upstream version (bz 1447849)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.45" date="1496836800">- Restart gssproxy when the server is reloaded (bz 1459483)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.46" date="1497268800">- Use v4 minor default on all v4 mount types (bz 1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.47" date="1497441600">- mount.nfs: Restore errno after v3 mounts on ECONNREFUSED errors (bz 1404121)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48" date="1497873600">- exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
- Correctly set the minor version when set in nfsmount.conf (1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4" date="1507291200">- rpc.nfsd: Do not fail when all address families are not support (bz 1450528)</changelog>
</package>
<package pkgid="5f8942d7b1b23a43d8bb1268af224dca06ba1d631f3a74900a46e8fbe6700333" name="nscd" arch="i686">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="4169e8acb2aee4fe2d1ed369c54730f84dacfef03d9ecd54622bbc6ef3a99c18" name="nscd" arch="x86_64">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="c48910184bd010050be615c16ff13629e521444f482ddaaf61a760f1d461dd81" name="nss" arch="i686">
  <version epoch="0" ver="3.28.4" rel="11.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to NSS 3.28.4
- Update nss-pk12util.patch with backport of mozbz#1353325</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
</package>
<package pkgid="cdce9ae345a2d8090d2103622c48180e8d4fb7f87dee34a6e8c23761e20ce9f2" name="nss" arch="src">
  <version epoch="0" ver="3.28.4" rel="11.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to NSS 3.28.4
- Update nss-pk12util.patch with backport of mozbz#1353325</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
</package>
<package pkgid="077149ed99f226bdf3d32bbc5d9cf3f987807d51be5de28522e6d06428b7a917" name="nss" arch="src">
  <version epoch="0" ver="3.28.4" rel="11.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to NSS 3.28.4
- Update nss-pk12util.patch with backport of mozbz#1353325</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
</package>
<package pkgid="196629397c0f3f8f25c4d3e24ab8e700b704b68cb027589881bec259828308ab" name="nss" arch="x86_64">
  <version epoch="0" ver="3.28.4" rel="11.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to NSS 3.28.4
- Update nss-pk12util.patch with backport of mozbz#1353325</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
</package>
<package pkgid="5847cc994742009b9de2dc87cc726de1d0e5c2f74494c432f9aca71eb0926570" name="nss" arch="i686">
  <version epoch="0" ver="3.28.4" rel="12.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="2618af9dc021c437e9fbdc5429ca4803ddf3c38489823f19d856b05378330e0f" name="nss" arch="src">
  <version epoch="0" ver="3.28.4" rel="12.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="ce3ff52fb90458c00821e4d65f5d77e4661fbcb6732faad3908480f570700bc0" name="nss" arch="src">
  <version epoch="0" ver="3.28.4" rel="12.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="a69f6c016107ba34dd9985724f496711c0bd2232eef3e2c4060c917c68083806" name="nss" arch="x86_64">
  <version epoch="0" ver="3.28.4" rel="12.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="27c4e3a0e2988f4045cb0fe9bbf6048708512b38e6d7b7ff10e48c67cbfc76c6" name="nss" arch="i686">
  <version epoch="0" ver="3.28.4" rel="15.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-13" date="1505908800">- Add backward compatibility to pk12util regarding password encoding</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-14" date="1505995200">- Update iquote.patch to prefer nss.h from the source</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-15" date="1506513600">- Add backward compatibility to pk12util regarding faulty PBES2 AES encryption</changelog>
</package>
<package pkgid="e68598b9f11aefa49f748434fc83edb24592ea4471a5f9cbaf2829af7b4155b1" name="nss" arch="src">
  <version epoch="0" ver="3.28.4" rel="15.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-13" date="1505908800">- Add backward compatibility to pk12util regarding password encoding</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-14" date="1505995200">- Update iquote.patch to prefer nss.h from the source</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-15" date="1506513600">- Add backward compatibility to pk12util regarding faulty PBES2 AES encryption</changelog>
</package>
<package pkgid="b5e2285f6f6886513481dcfb88ad0280e421eee648f2ffc96cf69dc7d6bdc11e" name="nss" arch="src">
  <version epoch="0" ver="3.28.4" rel="15.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-13" date="1505908800">- Add backward compatibility to pk12util regarding password encoding</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-14" date="1505995200">- Update iquote.patch to prefer nss.h from the source</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-15" date="1506513600">- Add backward compatibility to pk12util regarding faulty PBES2 AES encryption</changelog>
</package>
<package pkgid="9d4d1c3d3e0f197f3c4ad9008dd386414fc4a9aa2e26e887b14c53e970fe627b" name="nss" arch="x86_64">
  <version epoch="0" ver="3.28.4" rel="15.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-13" date="1505908800">- Add backward compatibility to pk12util regarding password encoding</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-14" date="1505995200">- Update iquote.patch to prefer nss.h from the source</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-15" date="1506513600">- Add backward compatibility to pk12util regarding faulty PBES2 AES encryption</changelog>
</package>
<package pkgid="a6855e78ba25995c280a1f3a20a876479b87ee09935147c34fbdb9de7abbda84" name="nss-debuginfo" arch="i686">
  <version epoch="0" ver="3.28.4" rel="11.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to NSS 3.28.4
- Update nss-pk12util.patch with backport of mozbz#1353325</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
</package>
<package pkgid="74f29b2dea6d8688be926a4fcd0e1908084e938389db1fce38915401d25d2ff6" name="nss-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.28.4" rel="11.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to NSS 3.28.4
- Update nss-pk12util.patch with backport of mozbz#1353325</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
</package>
<package pkgid="f18ec2040bbf88e34ec63d1d0595ef1d2dc322cfb35fc96f40bf59f3cd618b02" name="nss-debuginfo" arch="i686">
  <version epoch="0" ver="3.28.4" rel="12.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="dfc45d657cb94e4844482eccd4a2719e396067cb76af7dfb56bb55d87a3c9b0d" name="nss-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.28.4" rel="12.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="4bace870acbd7eadbff59fffb1e8f2b300f87d83400836afaf3491a6e9a29dba" name="nss-debuginfo" arch="i686">
  <version epoch="0" ver="3.28.4" rel="15.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-13" date="1505908800">- Add backward compatibility to pk12util regarding password encoding</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-14" date="1505995200">- Update iquote.patch to prefer nss.h from the source</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-15" date="1506513600">- Add backward compatibility to pk12util regarding faulty PBES2 AES encryption</changelog>
</package>
<package pkgid="fd8ac3ea55e404c72261261fac77a62c10edce552270c134c79b823b43554056" name="nss-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.28.4" rel="15.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-13" date="1505908800">- Add backward compatibility to pk12util regarding password encoding</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-14" date="1505995200">- Update iquote.patch to prefer nss.h from the source</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-15" date="1506513600">- Add backward compatibility to pk12util regarding faulty PBES2 AES encryption</changelog>
</package>
<package pkgid="5ec414c2b803c9e59b9adfa3a66cc76ceb2536089ddb9e4974da812bfc732f20" name="nss-devel" arch="i686">
  <version epoch="0" ver="3.28.4" rel="11.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to NSS 3.28.4
- Update nss-pk12util.patch with backport of mozbz#1353325</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
</package>
<package pkgid="46752e50e51ccc59ce1c36144ec1b155f663b989c1ed273baa2cb88d355a8301" name="nss-devel" arch="x86_64">
  <version epoch="0" ver="3.28.4" rel="11.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to NSS 3.28.4
- Update nss-pk12util.patch with backport of mozbz#1353325</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
</package>
<package pkgid="fb83da9df067212ed638d91cbade77f8b88c235ce759fcc0a59ac64ef1d40411" name="nss-devel" arch="i686">
  <version epoch="0" ver="3.28.4" rel="12.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="21da58fe473e5ef7cca712f8a87008c2323dca4dd7f8047d07c4bfa584d030eb" name="nss-devel" arch="x86_64">
  <version epoch="0" ver="3.28.4" rel="12.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="1dd870963f1d1f89a3592da11b1ac0e3f08227c340dcf1e1763236f905c6b1a5" name="nss-devel" arch="i686">
  <version epoch="0" ver="3.28.4" rel="15.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-13" date="1505908800">- Add backward compatibility to pk12util regarding password encoding</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-14" date="1505995200">- Update iquote.patch to prefer nss.h from the source</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-15" date="1506513600">- Add backward compatibility to pk12util regarding faulty PBES2 AES encryption</changelog>
</package>
<package pkgid="48d79c48014854eee430a4e543d9f7f937de700553a0a4e1f9efe1ac4c9823de" name="nss-devel" arch="x86_64">
  <version epoch="0" ver="3.28.4" rel="15.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-13" date="1505908800">- Add backward compatibility to pk12util regarding password encoding</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-14" date="1505995200">- Update iquote.patch to prefer nss.h from the source</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-15" date="1506513600">- Add backward compatibility to pk12util regarding faulty PBES2 AES encryption</changelog>
</package>
<package pkgid="2ab27e8da349db00764bc0ca653933ef4a1964514705e99ebc1767b922098b80" name="nss-pkcs11-devel" arch="i686">
  <version epoch="0" ver="3.28.4" rel="11.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to NSS 3.28.4
- Update nss-pk12util.patch with backport of mozbz#1353325</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
</package>
<package pkgid="a0f8dcb16ce751f0fb7064123d21b85369c5cc5bdfb7894fca1521694129fbe9" name="nss-pkcs11-devel" arch="x86_64">
  <version epoch="0" ver="3.28.4" rel="11.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to NSS 3.28.4
- Update nss-pk12util.patch with backport of mozbz#1353325</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
</package>
<package pkgid="cce7bf946696096b8fb74879e3ce736ef934e92fb92ef0b42b5ff3914ec9bc1f" name="nss-pkcs11-devel" arch="i686">
  <version epoch="0" ver="3.28.4" rel="12.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="3e1d3ae61a559eebba8dcdab7640e056a27b14ce8c4a1314a06827a84d204eed" name="nss-pkcs11-devel" arch="x86_64">
  <version epoch="0" ver="3.28.4" rel="12.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="d61604b07f8ebe124a05da46dea39cd435aeccdae0372235a3c45e7f123ace02" name="nss-pkcs11-devel" arch="i686">
  <version epoch="0" ver="3.28.4" rel="15.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-13" date="1505908800">- Add backward compatibility to pk12util regarding password encoding</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-14" date="1505995200">- Update iquote.patch to prefer nss.h from the source</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-15" date="1506513600">- Add backward compatibility to pk12util regarding faulty PBES2 AES encryption</changelog>
</package>
<package pkgid="66053a6a323916effe5321b1df0e239ec6d4a72305cdd99e2294cb9967a5e60a" name="nss-pkcs11-devel" arch="x86_64">
  <version epoch="0" ver="3.28.4" rel="15.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-13" date="1505908800">- Add backward compatibility to pk12util regarding password encoding</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-14" date="1505995200">- Update iquote.patch to prefer nss.h from the source</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-15" date="1506513600">- Add backward compatibility to pk12util regarding faulty PBES2 AES encryption</changelog>
</package>
<package pkgid="5a0730f720c2b77b937231f953f4e2f30c70e60fb4384bdb343570f851c4a45c" name="nss-softokn" arch="i686">
  <version epoch="0" ver="3.28.3" rel="8.el7_4"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.2" date="1460721600">- Adjust for a renamed variable in newer nss-util, require a compatible nss-util version.</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.2.3-14.3" date="1461153600">- Fix a flaw in %check for nss not building on arm
- Resolves: Bug 1200856</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.4" date="1467115200">- escape all percent characters in all changelog comments</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488801600">- Update to NSS 3.28.3
- Remove upstreamed patches for the previous FIPS validation
- Package lowkeyi.h and lowkeyti.h in freebl-devel
- Pick up a patch in the Fedora package to fix build issue</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1488888000">- Fix RSA-PSS corner case when the modulus is not of size multiple of 8</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-4" date="1490270400">- include new PKCS12 NSS specific mechanisms.
- alias CKM_TLS_KDF to CKM_TLS_MAC to preserve ABI
- add RSA PSS oid to decrypting PKCS #5 key blobs.
- move ec public key check from softokn to freebl so apps like Java can benefit.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-5" date="1495022400">- fix login handling for FIPS slots, patch from rhbz#1390154
- backport upstream fix for CVE-2017-5462 (DRBG leak)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-6" date="1495800000">- restore nss-softokn-3.16-add_encrypt_derive.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-7" date="1501675200">- let nss-softokn-freebl depend on recent version of nspr (rhbz#1477308),
  patch by Kyle Walker</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-8" date="1501761600">- fix fips post so that they actually run at startup</changelog>
</package>
<package pkgid="1c3136716d734829216738ed33afa7cfb026e7e6179e64842db14eb1b2646ac4" name="nss-softokn" arch="src">
  <version epoch="0" ver="3.28.3" rel="8.el7_4"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.2" date="1460721600">- Adjust for a renamed variable in newer nss-util, require a compatible nss-util version.</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.2.3-14.3" date="1461153600">- Fix a flaw in %check for nss not building on arm
- Resolves: Bug 1200856</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.4" date="1467115200">- escape all percent characters in all changelog comments</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488801600">- Update to NSS 3.28.3
- Remove upstreamed patches for the previous FIPS validation
- Package lowkeyi.h and lowkeyti.h in freebl-devel
- Pick up a patch in the Fedora package to fix build issue</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1488888000">- Fix RSA-PSS corner case when the modulus is not of size multiple of 8</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-4" date="1490270400">- include new PKCS12 NSS specific mechanisms.
- alias CKM_TLS_KDF to CKM_TLS_MAC to preserve ABI
- add RSA PSS oid to decrypting PKCS #5 key blobs.
- move ec public key check from softokn to freebl so apps like Java can benefit.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-5" date="1495022400">- fix login handling for FIPS slots, patch from rhbz#1390154
- backport upstream fix for CVE-2017-5462 (DRBG leak)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-6" date="1495800000">- restore nss-softokn-3.16-add_encrypt_derive.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-7" date="1501675200">- let nss-softokn-freebl depend on recent version of nspr (rhbz#1477308),
  patch by Kyle Walker</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-8" date="1501761600">- fix fips post so that they actually run at startup</changelog>
</package>
<package pkgid="a3777e7d70596222a9863b9b9adc8af9bab101738229f82f713bbabc83669d1e" name="nss-softokn" arch="src">
  <version epoch="0" ver="3.28.3" rel="8.el7_4"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.2" date="1460721600">- Adjust for a renamed variable in newer nss-util, require a compatible nss-util version.</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.2.3-14.3" date="1461153600">- Fix a flaw in %check for nss not building on arm
- Resolves: Bug 1200856</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.4" date="1467115200">- escape all percent characters in all changelog comments</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488801600">- Update to NSS 3.28.3
- Remove upstreamed patches for the previous FIPS validation
- Package lowkeyi.h and lowkeyti.h in freebl-devel
- Pick up a patch in the Fedora package to fix build issue</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1488888000">- Fix RSA-PSS corner case when the modulus is not of size multiple of 8</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-4" date="1490270400">- include new PKCS12 NSS specific mechanisms.
- alias CKM_TLS_KDF to CKM_TLS_MAC to preserve ABI
- add RSA PSS oid to decrypting PKCS #5 key blobs.
- move ec public key check from softokn to freebl so apps like Java can benefit.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-5" date="1495022400">- fix login handling for FIPS slots, patch from rhbz#1390154
- backport upstream fix for CVE-2017-5462 (DRBG leak)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-6" date="1495800000">- restore nss-softokn-3.16-add_encrypt_derive.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-7" date="1501675200">- let nss-softokn-freebl depend on recent version of nspr (rhbz#1477308),
  patch by Kyle Walker</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-8" date="1501761600">- fix fips post so that they actually run at startup</changelog>
</package>
<package pkgid="20c58ad3748a05d78982f2cd8d79da49fd26375f8c9a57304366e18f7c11fa5a" name="nss-softokn" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="8.el7_4"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.2" date="1460721600">- Adjust for a renamed variable in newer nss-util, require a compatible nss-util version.</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.2.3-14.3" date="1461153600">- Fix a flaw in %check for nss not building on arm
- Resolves: Bug 1200856</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.4" date="1467115200">- escape all percent characters in all changelog comments</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488801600">- Update to NSS 3.28.3
- Remove upstreamed patches for the previous FIPS validation
- Package lowkeyi.h and lowkeyti.h in freebl-devel
- Pick up a patch in the Fedora package to fix build issue</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1488888000">- Fix RSA-PSS corner case when the modulus is not of size multiple of 8</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-4" date="1490270400">- include new PKCS12 NSS specific mechanisms.
- alias CKM_TLS_KDF to CKM_TLS_MAC to preserve ABI
- add RSA PSS oid to decrypting PKCS #5 key blobs.
- move ec public key check from softokn to freebl so apps like Java can benefit.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-5" date="1495022400">- fix login handling for FIPS slots, patch from rhbz#1390154
- backport upstream fix for CVE-2017-5462 (DRBG leak)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-6" date="1495800000">- restore nss-softokn-3.16-add_encrypt_derive.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-7" date="1501675200">- let nss-softokn-freebl depend on recent version of nspr (rhbz#1477308),
  patch by Kyle Walker</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-8" date="1501761600">- fix fips post so that they actually run at startup</changelog>
</package>
<package pkgid="48922f03061d2a2a8d2fd6635c0302a70c8b821cfcb1c26c6de4052339fe1173" name="nss-softokn-debuginfo" arch="i686">
  <version epoch="0" ver="3.28.3" rel="8.el7_4"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.2" date="1460721600">- Adjust for a renamed variable in newer nss-util, require a compatible nss-util version.</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.2.3-14.3" date="1461153600">- Fix a flaw in %check for nss not building on arm
- Resolves: Bug 1200856</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.4" date="1467115200">- escape all percent characters in all changelog comments</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488801600">- Update to NSS 3.28.3
- Remove upstreamed patches for the previous FIPS validation
- Package lowkeyi.h and lowkeyti.h in freebl-devel
- Pick up a patch in the Fedora package to fix build issue</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1488888000">- Fix RSA-PSS corner case when the modulus is not of size multiple of 8</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-4" date="1490270400">- include new PKCS12 NSS specific mechanisms.
- alias CKM_TLS_KDF to CKM_TLS_MAC to preserve ABI
- add RSA PSS oid to decrypting PKCS #5 key blobs.
- move ec public key check from softokn to freebl so apps like Java can benefit.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-5" date="1495022400">- fix login handling for FIPS slots, patch from rhbz#1390154
- backport upstream fix for CVE-2017-5462 (DRBG leak)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-6" date="1495800000">- restore nss-softokn-3.16-add_encrypt_derive.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-7" date="1501675200">- let nss-softokn-freebl depend on recent version of nspr (rhbz#1477308),
  patch by Kyle Walker</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-8" date="1501761600">- fix fips post so that they actually run at startup</changelog>
</package>
<package pkgid="56638acd8fd1f49d77706a710e4dfababe36bff7e9127061d7678722d8a05b87" name="nss-softokn-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="8.el7_4"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.2" date="1460721600">- Adjust for a renamed variable in newer nss-util, require a compatible nss-util version.</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.2.3-14.3" date="1461153600">- Fix a flaw in %check for nss not building on arm
- Resolves: Bug 1200856</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.4" date="1467115200">- escape all percent characters in all changelog comments</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488801600">- Update to NSS 3.28.3
- Remove upstreamed patches for the previous FIPS validation
- Package lowkeyi.h and lowkeyti.h in freebl-devel
- Pick up a patch in the Fedora package to fix build issue</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1488888000">- Fix RSA-PSS corner case when the modulus is not of size multiple of 8</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-4" date="1490270400">- include new PKCS12 NSS specific mechanisms.
- alias CKM_TLS_KDF to CKM_TLS_MAC to preserve ABI
- add RSA PSS oid to decrypting PKCS #5 key blobs.
- move ec public key check from softokn to freebl so apps like Java can benefit.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-5" date="1495022400">- fix login handling for FIPS slots, patch from rhbz#1390154
- backport upstream fix for CVE-2017-5462 (DRBG leak)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-6" date="1495800000">- restore nss-softokn-3.16-add_encrypt_derive.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-7" date="1501675200">- let nss-softokn-freebl depend on recent version of nspr (rhbz#1477308),
  patch by Kyle Walker</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-8" date="1501761600">- fix fips post so that they actually run at startup</changelog>
</package>
<package pkgid="5b32a85aff97b0c2d9672e61a638d18ce41fdbe28922e1af78b8410e7c0e56cd" name="nss-softokn-devel" arch="i686">
  <version epoch="0" ver="3.28.3" rel="8.el7_4"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.2" date="1460721600">- Adjust for a renamed variable in newer nss-util, require a compatible nss-util version.</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.2.3-14.3" date="1461153600">- Fix a flaw in %check for nss not building on arm
- Resolves: Bug 1200856</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.4" date="1467115200">- escape all percent characters in all changelog comments</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488801600">- Update to NSS 3.28.3
- Remove upstreamed patches for the previous FIPS validation
- Package lowkeyi.h and lowkeyti.h in freebl-devel
- Pick up a patch in the Fedora package to fix build issue</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1488888000">- Fix RSA-PSS corner case when the modulus is not of size multiple of 8</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-4" date="1490270400">- include new PKCS12 NSS specific mechanisms.
- alias CKM_TLS_KDF to CKM_TLS_MAC to preserve ABI
- add RSA PSS oid to decrypting PKCS #5 key blobs.
- move ec public key check from softokn to freebl so apps like Java can benefit.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-5" date="1495022400">- fix login handling for FIPS slots, patch from rhbz#1390154
- backport upstream fix for CVE-2017-5462 (DRBG leak)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-6" date="1495800000">- restore nss-softokn-3.16-add_encrypt_derive.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-7" date="1501675200">- let nss-softokn-freebl depend on recent version of nspr (rhbz#1477308),
  patch by Kyle Walker</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-8" date="1501761600">- fix fips post so that they actually run at startup</changelog>
</package>
<package pkgid="40732d96e37089596e91ff50bb05cafce036ab0f10c5369dd954608ba1fdac56" name="nss-softokn-devel" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="8.el7_4"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.2" date="1460721600">- Adjust for a renamed variable in newer nss-util, require a compatible nss-util version.</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.2.3-14.3" date="1461153600">- Fix a flaw in %check for nss not building on arm
- Resolves: Bug 1200856</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.4" date="1467115200">- escape all percent characters in all changelog comments</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488801600">- Update to NSS 3.28.3
- Remove upstreamed patches for the previous FIPS validation
- Package lowkeyi.h and lowkeyti.h in freebl-devel
- Pick up a patch in the Fedora package to fix build issue</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1488888000">- Fix RSA-PSS corner case when the modulus is not of size multiple of 8</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-4" date="1490270400">- include new PKCS12 NSS specific mechanisms.
- alias CKM_TLS_KDF to CKM_TLS_MAC to preserve ABI
- add RSA PSS oid to decrypting PKCS #5 key blobs.
- move ec public key check from softokn to freebl so apps like Java can benefit.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-5" date="1495022400">- fix login handling for FIPS slots, patch from rhbz#1390154
- backport upstream fix for CVE-2017-5462 (DRBG leak)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-6" date="1495800000">- restore nss-softokn-3.16-add_encrypt_derive.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-7" date="1501675200">- let nss-softokn-freebl depend on recent version of nspr (rhbz#1477308),
  patch by Kyle Walker</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-8" date="1501761600">- fix fips post so that they actually run at startup</changelog>
</package>
<package pkgid="fad70726887c6f4f6d173ac24bd68024ac8eaf3b90e8a892dcaad3e004eb9e5d" name="nss-softokn-freebl" arch="i686">
  <version epoch="0" ver="3.28.3" rel="8.el7_4"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.2" date="1460721600">- Adjust for a renamed variable in newer nss-util, require a compatible nss-util version.</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.2.3-14.3" date="1461153600">- Fix a flaw in %check for nss not building on arm
- Resolves: Bug 1200856</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.4" date="1467115200">- escape all percent characters in all changelog comments</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488801600">- Update to NSS 3.28.3
- Remove upstreamed patches for the previous FIPS validation
- Package lowkeyi.h and lowkeyti.h in freebl-devel
- Pick up a patch in the Fedora package to fix build issue</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1488888000">- Fix RSA-PSS corner case when the modulus is not of size multiple of 8</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-4" date="1490270400">- include new PKCS12 NSS specific mechanisms.
- alias CKM_TLS_KDF to CKM_TLS_MAC to preserve ABI
- add RSA PSS oid to decrypting PKCS #5 key blobs.
- move ec public key check from softokn to freebl so apps like Java can benefit.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-5" date="1495022400">- fix login handling for FIPS slots, patch from rhbz#1390154
- backport upstream fix for CVE-2017-5462 (DRBG leak)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-6" date="1495800000">- restore nss-softokn-3.16-add_encrypt_derive.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-7" date="1501675200">- let nss-softokn-freebl depend on recent version of nspr (rhbz#1477308),
  patch by Kyle Walker</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-8" date="1501761600">- fix fips post so that they actually run at startup</changelog>
</package>
<package pkgid="46eea3f17efe2b9844f2662e5c298072297e5f488c8ca5818679889027379a86" name="nss-softokn-freebl" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="8.el7_4"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.2" date="1460721600">- Adjust for a renamed variable in newer nss-util, require a compatible nss-util version.</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.2.3-14.3" date="1461153600">- Fix a flaw in %check for nss not building on arm
- Resolves: Bug 1200856</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.4" date="1467115200">- escape all percent characters in all changelog comments</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488801600">- Update to NSS 3.28.3
- Remove upstreamed patches for the previous FIPS validation
- Package lowkeyi.h and lowkeyti.h in freebl-devel
- Pick up a patch in the Fedora package to fix build issue</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1488888000">- Fix RSA-PSS corner case when the modulus is not of size multiple of 8</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-4" date="1490270400">- include new PKCS12 NSS specific mechanisms.
- alias CKM_TLS_KDF to CKM_TLS_MAC to preserve ABI
- add RSA PSS oid to decrypting PKCS #5 key blobs.
- move ec public key check from softokn to freebl so apps like Java can benefit.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-5" date="1495022400">- fix login handling for FIPS slots, patch from rhbz#1390154
- backport upstream fix for CVE-2017-5462 (DRBG leak)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-6" date="1495800000">- restore nss-softokn-3.16-add_encrypt_derive.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-7" date="1501675200">- let nss-softokn-freebl depend on recent version of nspr (rhbz#1477308),
  patch by Kyle Walker</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-8" date="1501761600">- fix fips post so that they actually run at startup</changelog>
</package>
<package pkgid="1f6359fb5f2eadba79cb222dd4e405008bdaed15fc41ec6a335ab09736c67605" name="nss-softokn-freebl-devel" arch="i686">
  <version epoch="0" ver="3.28.3" rel="8.el7_4"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.2" date="1460721600">- Adjust for a renamed variable in newer nss-util, require a compatible nss-util version.</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.2.3-14.3" date="1461153600">- Fix a flaw in %check for nss not building on arm
- Resolves: Bug 1200856</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.4" date="1467115200">- escape all percent characters in all changelog comments</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488801600">- Update to NSS 3.28.3
- Remove upstreamed patches for the previous FIPS validation
- Package lowkeyi.h and lowkeyti.h in freebl-devel
- Pick up a patch in the Fedora package to fix build issue</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1488888000">- Fix RSA-PSS corner case when the modulus is not of size multiple of 8</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-4" date="1490270400">- include new PKCS12 NSS specific mechanisms.
- alias CKM_TLS_KDF to CKM_TLS_MAC to preserve ABI
- add RSA PSS oid to decrypting PKCS #5 key blobs.
- move ec public key check from softokn to freebl so apps like Java can benefit.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-5" date="1495022400">- fix login handling for FIPS slots, patch from rhbz#1390154
- backport upstream fix for CVE-2017-5462 (DRBG leak)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-6" date="1495800000">- restore nss-softokn-3.16-add_encrypt_derive.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-7" date="1501675200">- let nss-softokn-freebl depend on recent version of nspr (rhbz#1477308),
  patch by Kyle Walker</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-8" date="1501761600">- fix fips post so that they actually run at startup</changelog>
</package>
<package pkgid="7b12232865195d3a2bd985f691e34b11a4badafc2561cf6abcd799ad3f2cf035" name="nss-softokn-freebl-devel" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="8.el7_4"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.2" date="1460721600">- Adjust for a renamed variable in newer nss-util, require a compatible nss-util version.</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.2.3-14.3" date="1461153600">- Fix a flaw in %check for nss not building on arm
- Resolves: Bug 1200856</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.4" date="1467115200">- escape all percent characters in all changelog comments</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488801600">- Update to NSS 3.28.3
- Remove upstreamed patches for the previous FIPS validation
- Package lowkeyi.h and lowkeyti.h in freebl-devel
- Pick up a patch in the Fedora package to fix build issue</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1488888000">- Fix RSA-PSS corner case when the modulus is not of size multiple of 8</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-4" date="1490270400">- include new PKCS12 NSS specific mechanisms.
- alias CKM_TLS_KDF to CKM_TLS_MAC to preserve ABI
- add RSA PSS oid to decrypting PKCS #5 key blobs.
- move ec public key check from softokn to freebl so apps like Java can benefit.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-5" date="1495022400">- fix login handling for FIPS slots, patch from rhbz#1390154
- backport upstream fix for CVE-2017-5462 (DRBG leak)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-6" date="1495800000">- restore nss-softokn-3.16-add_encrypt_derive.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-7" date="1501675200">- let nss-softokn-freebl depend on recent version of nspr (rhbz#1477308),
  patch by Kyle Walker</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-8" date="1501761600">- fix fips post so that they actually run at startup</changelog>
</package>
<package pkgid="e5f74a3ab48331cee2185501de2913318cc9b2af669f085ae69074ba673cf58d" name="nss-sysinit" arch="i686">
  <version epoch="0" ver="3.28.4" rel="11.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to NSS 3.28.4
- Update nss-pk12util.patch with backport of mozbz#1353325</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
</package>
<package pkgid="3968c34f95acb4e975ab5caa9f389109cbb56cf2191a20446035edba77305354" name="nss-sysinit" arch="x86_64">
  <version epoch="0" ver="3.28.4" rel="11.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to NSS 3.28.4
- Update nss-pk12util.patch with backport of mozbz#1353325</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
</package>
<package pkgid="55908aba1d2b8f9e5cf1f2582c390743e139d8479da75e1ceea94f24bc24dcba" name="nss-sysinit" arch="i686">
  <version epoch="0" ver="3.28.4" rel="12.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="d1c59b5af6b1f1bf74b158f18631e2376c516616fd860091480f86e33d6afe47" name="nss-sysinit" arch="x86_64">
  <version epoch="0" ver="3.28.4" rel="12.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="06b68cd404d8514c873050c386e29bbe15bf166cedff1ffaace4fcc5e0d8274e" name="nss-sysinit" arch="i686">
  <version epoch="0" ver="3.28.4" rel="15.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-13" date="1505908800">- Add backward compatibility to pk12util regarding password encoding</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-14" date="1505995200">- Update iquote.patch to prefer nss.h from the source</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-15" date="1506513600">- Add backward compatibility to pk12util regarding faulty PBES2 AES encryption</changelog>
</package>
<package pkgid="cbe6d0cbc280abe29e276ef3403acad29512df90e79763305e147a6c2896a239" name="nss-sysinit" arch="x86_64">
  <version epoch="0" ver="3.28.4" rel="15.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-13" date="1505908800">- Add backward compatibility to pk12util regarding password encoding</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-14" date="1505995200">- Update iquote.patch to prefer nss.h from the source</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-15" date="1506513600">- Add backward compatibility to pk12util regarding faulty PBES2 AES encryption</changelog>
</package>
<package pkgid="43a615b65835f2c90d12e17b7c6af658a1aa4fea43888a1bc89d29694f480deb" name="nss-tools" arch="i686">
  <version epoch="0" ver="3.28.4" rel="11.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to NSS 3.28.4
- Update nss-pk12util.patch with backport of mozbz#1353325</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
</package>
<package pkgid="aab01b144ed56a1b70eb3c3917540a99452c1888cc69e10921a72f9f2cb15cb6" name="nss-tools" arch="x86_64">
  <version epoch="0" ver="3.28.4" rel="11.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to NSS 3.28.4
- Update nss-pk12util.patch with backport of mozbz#1353325</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
</package>
<package pkgid="2102e6cdb325fd3f654e2382e40ffc92596643463b895052e38bdf75003dd25f" name="nss-tools" arch="i686">
  <version epoch="0" ver="3.28.4" rel="12.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="d41007bd7c4b7b5a56e42287ec93809d249e55ce9540361e46b2c80a63d129ed" name="nss-tools" arch="x86_64">
  <version epoch="0" ver="3.28.4" rel="12.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="5f0f0cd48851148774a1727416ceb88e75f2193f49c63c54a6006854c373ad14" name="nss-tools" arch="i686">
  <version epoch="0" ver="3.28.4" rel="15.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-13" date="1505908800">- Add backward compatibility to pk12util regarding password encoding</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-14" date="1505995200">- Update iquote.patch to prefer nss.h from the source</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-15" date="1506513600">- Add backward compatibility to pk12util regarding faulty PBES2 AES encryption</changelog>
</package>
<package pkgid="7d76da20f91068800822e578345bfe7a63cc5b2fc5564e6eca5fa30dce2288a6" name="nss-tools" arch="x86_64">
  <version epoch="0" ver="3.28.4" rel="15.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-13" date="1505908800">- Add backward compatibility to pk12util regarding password encoding</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-14" date="1505995200">- Update iquote.patch to prefer nss.h from the source</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-15" date="1506513600">- Add backward compatibility to pk12util regarding faulty PBES2 AES encryption</changelog>
</package>
<package pkgid="ec5385ac818b12a5f21dcef30ca9889cd5959b0eb6f488b954bac2166aecefbc" name="ocaml-libguestfs" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.50" date="1440936000">- v2v:
  * When debugging, dump OVF to stderr.
  * Ignore missing kernels from grub
    resolves: rhbz#1230412
  * Calculate VMware dcPath correctly (1256823)
  * Map empty VMware network or bridge name to default (1257895)
- p2v:
  * Wait for network to come online before testing connection
    resolves: rhbz#1256222
- Fix tests to run correctly with libguestfs-winsupport 7.2.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.51" date="1441108800">- v2v: Fix handling of extra slashes in dcPath calculation
  resolves: rhbz#1258342 rhbz#1256823
- v2v: Fix -oa preallocation option
  resolves: rhbz#1251909</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
</package>
<package pkgid="58e4f29f8d1315e70660feda6cbcd35c1e6372dffef04e08d608a1f2526091c2" name="ocaml-libguestfs" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="7f15218bdce9abdf68900d49c47c504ec8999110eea7806d029ade5fa246debd" name="ocaml-libguestfs-devel" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.50" date="1440936000">- v2v:
  * When debugging, dump OVF to stderr.
  * Ignore missing kernels from grub
    resolves: rhbz#1230412
  * Calculate VMware dcPath correctly (1256823)
  * Map empty VMware network or bridge name to default (1257895)
- p2v:
  * Wait for network to come online before testing connection
    resolves: rhbz#1256222
- Fix tests to run correctly with libguestfs-winsupport 7.2.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.51" date="1441108800">- v2v: Fix handling of extra slashes in dcPath calculation
  resolves: rhbz#1258342 rhbz#1256823
- v2v: Fix -oa preallocation option
  resolves: rhbz#1251909</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
</package>
<package pkgid="4a87fb61b58b5a0d4a7a8e164c8c1f704687247a98b85ec40c7f1d8b64c6442b" name="ocaml-libguestfs-devel" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="95df2d1b0589f95f79f573b09fcfe03e2fe04a96f681d18222e931f7e6d08de7" name="openscap" arch="i686">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="587838a3a16d030c8271ef8a8d569739dc22ccac6b9d563574436628d5d4eb46" name="openscap" arch="src">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="098fde031f9943eda6785f0e8133ac1f40ba6c82118c72510cf98b51bb209ae2" name="openscap" arch="src">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="53e57d91bbe0f04ebe00deb3c505cbd59d00a71c8f165c671307b0f88fb6e77e" name="openscap" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="02c40ce4806042e7c90e711e7c7286f463542cab4287bdaa2d30b65f61521a48" name="openscap-debuginfo" arch="i686">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="e304faa872118a62ea7dc71fbc00a5a76b5a4a33d5bb4eb3ed1911655da2ea55" name="openscap-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="4a395d97d67904d40af45f7cd4740792d573aa0dc1f6afb76c353556a16c081d" name="openscap-devel" arch="i686">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="2a1a4ce94e9954c18ed4b943f9bac9019fc8a350f27df805e1dac3589d7d192b" name="openscap-devel" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="4497e1638ef6db8a988385b4ef8c2fa51e09f2e82f62a81257ac10def9723c5e" name="openscap-engine-sce" arch="i686">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="499f98e4ad7cd3bc788930e7e1e404cc3c45b5ab331a84b97bb3568f15c30b49" name="openscap-engine-sce" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="7ac6330ecea50a1d227098a29d6a6d8c615157f80a216758f9072261d4d1778f" name="openscap-engine-sce-devel" arch="i686">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="22171cad96c5eaea6b1de36f8f10bd9e2257213b4f86e9856abeaacdb7830a30" name="openscap-engine-sce-devel" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="927d6d467a377c10c247c8a533bd423153249fbc41a1f609cb03d39c11d18ab8" name="openscap-extra-probes" arch="i686">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="536b76072f1b80989546e6c6d1ac3ea73d3acb39ccf2b66822aa3f61430830e5" name="openscap-extra-probes" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="554b97b291aa3e3c6be0d91db324f83ce6571d4f701533ed7c6b218cf912175e" name="openscap-python" arch="i686">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="edb03a5e5d938b7757fc4f09036df9ae1b3e1edfaa618ca5271eb333156b4040" name="openscap-python" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="7d67bab82bce5c6e6b47ec16973a3deb35ff41652be059de840cf68fc97209ff" name="openscap-scanner" arch="i686">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="e3e9b671fed5f59d65d65e5c04962e21535c19cca4e0e24cfc30daedc2b0ba9e" name="openscap-scanner" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="31abc0ebae3f462ba6dd108ea7e9e539dccaab5b69638aaea1c1d643c2cb52a7" name="openscap-utils" arch="i686">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="e8dc1ac6b00592994d309566db83ea68f2a33f996504aa9a23733647ab6cccb8" name="openscap-utils" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="0825eda0adb50b5cec79db40a80697e130c4fd8bc6a86e981b59d64e2c70db0b" name="openssh" arch="i686">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="0d9de41fe6ad1263b1ebc3ca6ce004f81496f53f23538c6762142a35726d6dca" name="openssh" arch="src">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="f37b5873dba94eb06840a5a5a47c4128ba660ec4c3067ce0e10e59647140da2b" name="openssh" arch="src">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="15b2344be2765b256981241acd80ff7ed39510a3596dcfb5d1e3cd62ab42c93a" name="openssh" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="a43cfb784490a8db12ce90fc29f8568c4644a18f5fc9554712d2f37121b640a5" name="openssh" arch="i686">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="5055a2933d9745cda89fa4a84213f99ad93716214a05031d3df2b7975a909cc8" name="openssh" arch="src">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="069254ff29cb23e757892728ee35e59749915e0e152e26ba1a292d388b1f6f97" name="openssh" arch="src">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="5139c84bc8d92bcf72abc0f4118f4153ae3c5e7c69bf593714342c5c120ae663" name="openssh" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="bde079a1d2d5f1153f35bfd43c477eb44167d0373dad7cb1405160d1f59f4a5a" name="openssh-askpass" arch="i686">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="9ba32ea1a08db0485e6d2a240a951412220924e715471e29592ff7d865fb49c8" name="openssh-askpass" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="d1f39588d69deda7e08fd5dbba4dda13954df92bbd390baf4b90a2eced76e10c" name="openssh-askpass" arch="i686">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="86fb04785ea5437473404b13d9db840efa19a1385cbf8b29d8685ee3c8680740" name="openssh-askpass" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="6336ac283a2565eebb76a4557e9dc11558333fed44701520612f51da03b12ef5" name="openssh-cavs" arch="i686">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="62e5c698c89a6eacff6e0365d4fd5e35ab8bd6c7688ceeae5f62b3dacefc7108" name="openssh-cavs" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="055eb9dfe77ea83b970a1750342dbf42f89dd152b66036b7de3e003cf2a9b808" name="openssh-cavs" arch="i686">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="d1ed40cfe0a038ae6e85802fc0bc958dca19a44f85bf359ceb7d235e414acc28" name="openssh-cavs" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="fd2ca1f3d2022bb482045ef7ab9a42cc78cbb8e19deb60abf8bff8549505c707" name="openssh-clients" arch="i686">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="815ad296dee64b4b4d3905b19b621a4d2f7835b9472c411c9703fd1dba756964" name="openssh-clients" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="2b7c5069e9fa7f30a252398bf6f18f7dd4c21afaf80db9fe4f5487f36051a275" name="openssh-clients" arch="i686">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="8f538b3d56e057171467298efba1a2efb6b7acca622cdfd19d9defdaf64ead0c" name="openssh-clients" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="4e68f723e7ef99e41bc98cc07e3a18701c6309d084bb7fa17260f03fe92af2a3" name="openssh-debuginfo" arch="i686">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="8366d37ab0042f68e8b89c63d59ac8330a7b9b405e410f9e304f144acede48ec" name="openssh-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="84eb4b0797c32db44cd6c26ca506a3c0adda0edddabeb0a503c0426747ffc19c" name="openssh-debuginfo" arch="i686">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="48cd1107118874447bb90ea10560ac0798a4274a850c8af66840afe5f4d1431a" name="openssh-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="9d738b83313249b6a7c3449e79bb403f8d880d2d5a8f5429585e8f2228b2d4ba" name="openssh-keycat" arch="i686">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="69a98199550e0ece656d23d5956ab27ecb3defeb25bac258a22073aa46dfbece" name="openssh-keycat" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="9faceefdabf52ca6a89cb9de5d6af57283ba3ddaed84aa459618b6f19b0e813c" name="openssh-keycat" arch="i686">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="291cfa213499e81facf7b27a096948d8e572903bd417b20dfdfb0aa3081da6ee" name="openssh-keycat" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="63aa0206e4083d3e284bb6d7be4fcda6bf434abfb16097348ea2570d72702b66" name="openssh-ldap" arch="i686">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="608de8f177d45ae8f33bf1b0339fba01ebb8b8240ad9a2d9f4d2ec1ade05375f" name="openssh-ldap" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="d9f4541da51fd44cb34dacfad17a2ebe0dcce348192acfd9bc8fdcbd37dd973a" name="openssh-ldap" arch="i686">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="8e83a16c3604b5967e34e2d9ab0c0a8995798ed53287fd725727d159a2444fe1" name="openssh-ldap" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="4b6b4c6762ea30190deb1b9791724c94cc91d59542811d68465cd30466880d2c" name="openssh-server" arch="i686">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="777ee29cf6e1ffd073523a5f0f7d8aefe31d74fb78b8b4815943be010fe19db7" name="openssh-server" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="9f152dfaa613350e31adfb532c1d2b937d3387d18b1cb86226303ff461d59780" name="openssh-server" arch="i686">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="7d43ec79b246e9d1abf99b33fda88fd623f7b80f812aeee0f3fadc64eb177c60" name="openssh-server" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="221e71708ced180186ed39775ea237a4fe3eeaa844ef78e3c3b93ecf02567457" name="openssh-server-sysvinit" arch="i686">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="8a0c0a2513a7e1fb2984a5d3b36c688fa269019d99ef7ee58053cff124d815b3" name="openssh-server-sysvinit" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="018c8ac2c573f7353ad4c4139b647d6c4665980b093ef1ab9a2cadc60923c44f" name="openssh-server-sysvinit" arch="i686">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="ae350022054bc209da7b554d92e4795816378e57bf9790c0675d0e1735f6c1f7" name="openssh-server-sysvinit" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="cb276b2ab73b09d42606ba7bc4e68b87195dfd0c75e8f2ebe5dbdeb6692829cb" name="pacemaker" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="6642a2bfd54ff34636d006427397087ba37e418e20e69f57a9b2c0a895f8ca30" name="pacemaker" arch="src">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="6949fc8fcae720493774c0e38d12094ea8560f8c32101e02362a31bb4a6886b6" name="pacemaker" arch="src">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="78dad2bd1d08df3f96639f40ff962afb1ff58f74cb4b82de618b7c84e6ce2947" name="pacemaker" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="dc9b8b8b51c9858ca2580f4747ba938a6b9bd97142abca41ade35f59279fd8e6" name="pacemaker" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="2af3c8a1159e2e1d76dd44ad6124bb0f6f475549e349c5be87398f2676e57c5a" name="pacemaker" arch="src">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="c4743322609d56a2fdb47faa9204a439eb21035fcbbe79c277d8b43db5a43477" name="pacemaker" arch="src">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="48cf03043312c32f2c7346e611e96a4b09041cb05349eb6222d0953cd97747ec" name="pacemaker" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="a36f39fd54dfffb4274f7c5b6f37631fafbe0fdd741f69838207b930e0ab6f2b" name="pacemaker" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="8bcbb94dc9aaeb508bbd83ef1c6ae5808f38f39d963b8a676b90b771dbb673b8" name="pacemaker" arch="src">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="f062aae93910dcc00f74dc3a8f4a05aea6f48d881a8319939c971539c185ca76" name="pacemaker" arch="src">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="eccec4637cc3f98a5612b13a1758bd68d8d70e793a17f5a31e8663b30d2127fd" name="pacemaker" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="f41cf4bcfef2b55d344c846233f7343e8d57c82e1c3ab1ec004098bf0aa4ced3" name="pacemaker" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="518e892a951db331d542041526b62b4188823363e8bc24c992a3c36e7131c017" name="pacemaker" arch="src">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="b4c0e8f8788c8358562017ab478a7750ae76aa2d2832d7bb1f18ce17d69281c4" name="pacemaker" arch="src">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="853c61c1806226670517db6e4b382808412e3fa9de00d0c7fb9c9812d0e15945" name="pacemaker" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="bc5d881f76a88ffa013a57cbb2f0d7bac29803adb17193c4fc525940a9094537" name="pacemaker" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="0835d6ee02c73b219a8555a61b893ad858813f1baf2bba3d2e608173685e2906" name="pacemaker" arch="src">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="6eab51b78a67ac77d51dfe1d0577e26fc27884afb1bc8ca2b9d01ebbfc2e24d5" name="pacemaker" arch="src">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="326407c5ee48b03b1f1d78f5e2368441dc8ad534b6156ded6f8abef0fa010539" name="pacemaker" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="dd1b2f0b90ae439871577c6ecf3a4b0e62528c0633a062a185d5d532d8e57835" name="pacemaker-cli" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="52dfe34b6973995295a2bde0d05ac2e8caca8046d984561bea730b96224be757" name="pacemaker-cli" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="f9ede039a2d448d352f8641df1f6254916333760f7dbdc683d7a3e247ccbe644" name="pacemaker-cli" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="d63875ab542e984cd6830577d44592c49c439f0c90272df698f6ccd5855eef72" name="pacemaker-cli" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="964b26ade2ad33eeee4adf6183238f236496b582a2ee60a70289a3ee0fbcce66" name="pacemaker-cli" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="0367c960865a5f979acddd7233f7fc7bd6734d1b6399678d8353b7dd4ad42598" name="pacemaker-cli" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="a2f0d86bded94e255127d009f6a6f1b8ad6f77165317e71b4d6f50e7186e7c3d" name="pacemaker-cli" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="ad50fe281337249c9e277fdfdc4eeaea4725b8aa0e712269ee2a200c3bd66b60" name="pacemaker-cli" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="7c4a02d77b26f1bc53b811390e857f59752ec6e4122315b62fdf92e2f8d3e9a7" name="pacemaker-cli" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="eb30a45145a9478bb1905445770b318a8a65ff1e41ac34e1bf8c76c926aa1c75" name="pacemaker-cli" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="a5f13bc6364105d50e11c788685d7f7dc3d222f51414f32345a6812ba8af98e7" name="pacemaker-cluster-libs" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="a365a30ce21f32ac7ccb93facad995169aebb13ea41e2e9f265f2f7970d8ec81" name="pacemaker-cluster-libs" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="7d6a992939337c40e369c01372c09b53198135feeaca81be69d3e95ace0d783f" name="pacemaker-cluster-libs" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="f24c5ad3bb7d40f422c16fc15acb153cac5edd40e597d169bcc8414bb90f1804" name="pacemaker-cluster-libs" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="e83aa67f58b522cadc8e6340fc3335e04329473d96dff66a31b13a12bc9a33a4" name="pacemaker-cluster-libs" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="02a4d75c4c76e5eb58f495b68fa99ffaa6bec8ce8cfc50f05135954be05f4b90" name="pacemaker-cluster-libs" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="db4cf84c0b8f3879bf8fa6b186e417bd47a85d61bd71038fc2f69b6ff2876a95" name="pacemaker-cluster-libs" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="df7c87e50a1eadf8e027c9e708254cf84f5af450f8622ea2a41a2bc2c5800883" name="pacemaker-cluster-libs" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="bf4f5fbd386cc3ab8686b623fd186c4bdc8b3062b760d637812866df3118c174" name="pacemaker-cluster-libs" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="1621940f2a526c3b6fb7acab7824e4e5da091086869960fb2de1cab286ecd152" name="pacemaker-cluster-libs" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="b5e2ace54fc0dd33f87799a16ff93d0d513841fd8445640ac96c3f6eaf29d57e" name="pacemaker-cts" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="d70c9222259dc75b8f0f546b4e6b04f2c0fc458e3dba9bcf469fe816c26d8633" name="pacemaker-cts" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="ef2d32eaa2c233274a8c0fc2169596dd6147a957cd589b6a0a25c271519395d7" name="pacemaker-cts" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="6fb26ba459b2d85b593b07d275fb983a51450c47e31f85d6a27be9928bdd8f8c" name="pacemaker-cts" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="0833a7e4c0586ec948e1c0fa597b4e789a7eeea84c19eac08ed52f019c65d2a1" name="pacemaker-cts" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="7622630e8c7cca6d9b71dc92a18623a5316649c5a3167acf22e8b6f422297b55" name="pacemaker-cts" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="f1494968b7065ab9d6339d4bd17629524c00ec3bffacc08240f3c17af3b41327" name="pacemaker-cts" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="766ffb062dfc0c57106ae46ce77e250808005afcb23b17d62db12912343f1afb" name="pacemaker-cts" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="4b942704eec63b5f93c62cad07c302991497b4326b0cec5f30e6a36a9365a7e5" name="pacemaker-cts" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="6ab805758b2a7cf9bc2e58c1553c289275150db20fcab197b79f086742b1736a" name="pacemaker-cts" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="02328dd690d0010a00aaaeda41f0cd2ded96dd2740462ac52ac1d0aa90b56911" name="pacemaker-debuginfo" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="b8d28afaab58fe5021d866cbaf974cf723860491555d9dbf0faff47af18b837a" name="pacemaker-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="f5fe15bf177f479c4c430ddc228ed563c3fae5bbdc8cd1f92169d50401ab0d71" name="pacemaker-debuginfo" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="abd95e886aee4f60304b562b033e98e0728e9e83397198027b0a2d845ef52b54" name="pacemaker-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="278ce30b711462a98183b0b777a9c57ccef232c249c0f3c10a283de5136f6f53" name="pacemaker-debuginfo" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="2005660b464091f5b6d0aedbc29e6efd1d030b712dd71eb5cf9b6654abdb4b6c" name="pacemaker-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="032c19e9aff820e3c8011157e744651f8056c45b8b3d58b253e8618c725cf74a" name="pacemaker-debuginfo" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="ea561970498ae0f8889f8266c6ddd40cd76f810ce96bd852e769f6aab49263d8" name="pacemaker-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="48d743e7d35551e57d162048b06326cbd350ca93d69e7b308d653c0507b0cb5d" name="pacemaker-debuginfo" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="1652cc6b7ab4577ac83a7b552098fe662b89adfc84ebac6a52ce79b19ebe4539" name="pacemaker-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="0611512731c1ba3d49498da8973312e1c2d4fa0eb65cdf60cb329b67bdc10914" name="pacemaker-doc" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="5690792757eb25378e5acc666017fa11ddbdc10d5c6e1d08e733cc4b983fa3e4" name="pacemaker-doc" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="83f925fb8e804ffc0baac856eb247b1d2129de475110165cddeb29de26907007" name="pacemaker-doc" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="a7c94d331854659ad1de3a43525a9c3a01dcbabccd46409bb37a57ac7f958c56" name="pacemaker-doc" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="7a1f4c8b9be78a25ffeb18cb4e17535be4a1779fd0b27f653c7a1b154e9cc436" name="pacemaker-doc" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="83314fa17e1a650989ae19f2b83226fea8bf192cdc4de0aa16cdcfe64e088ce1" name="pacemaker-doc" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="80ac8025e5abbd1f4d05207344204848b802cc354a1efbb2449a3162e9af6413" name="pacemaker-doc" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="5c23a5d5f575ba54fb141995869313cc7e39ba2a47c3a6bb1a0f79be8b7a2bcb" name="pacemaker-doc" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="3edb1b5131df35f2a4524be21616388b71ba9884229522e3865357b6b61fbd28" name="pacemaker-doc" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="e121fa9e41aa6ea7554c9847172d6a089323fd26f5ca10e50f17a6e3255e779e" name="pacemaker-doc" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="e5e1dbdfd517c38b03ace8f22c3eb790046347d5390b20b6db382b84d98ab6d6" name="pacemaker-libs" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="7e5829cf92eb92d0d90d428026506d3a490eb14ecdfb37b16b57ac799e12a393" name="pacemaker-libs" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="4c0f3205e78f6719c2c3a854b33028eb7aba95fb32c553b1bfa0337b1d7b0586" name="pacemaker-libs" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="2e3a12b0ec191e9a14b2463c4d8d9b262bb57bf84ce2cae1dad50b5a1424406e" name="pacemaker-libs" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="9902a0fe694aaa434292b1568f3bcb86e3a21a352fe7aea740523097eb750923" name="pacemaker-libs" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="cfd13249c31e3282ab515b6f1e7bdb7374e8e8bedd6c6cbf2ce761690e662aea" name="pacemaker-libs" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="caa5d4a1abb1918852c300792b9cdd73485a2316f647f9e2da1b2eab0036186b" name="pacemaker-libs" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="962d79e3148581fe039a6250fac383713c4e5c023fbb522ef89493dcd3199888" name="pacemaker-libs" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="c785de100b3dbbd7ac5ba22a51b79537cfef0f104bfee73fa5958e61419d5986" name="pacemaker-libs" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="d951841ebf4485ff2be59f17dabf14e214a361df6056fc473bbabfcacc2871dd" name="pacemaker-libs" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="900d737532507672856e555721ba6d9318b3027eab1d25f34974185e727faec4" name="pacemaker-libs-devel" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="812090268041a38423732d368f85b472c4bf33ec42784867ecb9082f7692f0b7" name="pacemaker-libs-devel" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="d75ca52b768b31433d840fb92f43d565ec21b034afb1f241348f3859cad0fd50" name="pacemaker-libs-devel" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="7ff0b9309ef808582ea9ed0193a998ac29ace63139e81862f995196af9b59fcc" name="pacemaker-libs-devel" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="4686f9a786f350ce80830fc05bdb54f6b6f38139027b18046f004a98b0f21437" name="pacemaker-libs-devel" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="e08129832aefa01272f73f9361c4382d42ddeff2f7daed925f7faed7b1766b41" name="pacemaker-libs-devel" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="6a794d6afe8867816ca83a7a2a18c43503aa378a444b938c94f35a594908d3ff" name="pacemaker-libs-devel" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="1037279446c132423d692c5da25f4c202e7feb6a7190cfff67976a0f2d735e1e" name="pacemaker-libs-devel" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="9be61afc5076925de04c1d41a847cc85cc4a3d6605a7a239a2e0e03964b283dc" name="pacemaker-libs-devel" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="4e2e3a2393710de8e3dcbc0aeb1c1fe7289b2da38f09fb925931c2b9eea4ddec" name="pacemaker-libs-devel" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="9cdc86e466f78e1a5b411a14db6feb1ec0d266719c2f79d84fcbc6eff32e1069" name="pacemaker-nagios-plugins-metadata" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="c717e76374e02195eda14b0fdccf8dcf94f49667267d7b0714fa7dd7927b70ea" name="pacemaker-nagios-plugins-metadata" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="59498679b653c505954ae79d27c101c99c0d164a7ca4bbbd7dcf337fb3c789ce" name="pacemaker-nagios-plugins-metadata" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="76b39310d45efd6876b7805a99f11a3786765fd1663da3b39c1ef0a866a18a3d" name="pacemaker-nagios-plugins-metadata" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="def36d977a0eadc7039333003780c7b6ffb5780ea842a5b1332a1a71d2d9979a" name="pacemaker-nagios-plugins-metadata" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="2b2d0c5f2da78f163b3092f309dd3a415fc18ffc5e91946a82d6721ef61996f0" name="pacemaker-nagios-plugins-metadata" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="a3a40d7928879488b199c9889c4f7a3da685860387d43a6a0000343b79f2d778" name="pacemaker-nagios-plugins-metadata" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="69f656ea8bca887d651543c317fb5750f0ee42bfe19d062ae1cd39745f84bece" name="pacemaker-nagios-plugins-metadata" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="394dbadef6de3701f643dbbc21f076e66a760fa78ae53ca630a4d6cf82b1efc7" name="pacemaker-nagios-plugins-metadata" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="578c074321bfed2acde87a280624b7d15ec9c0eef68e1eff987be833255a17a3" name="pacemaker-nagios-plugins-metadata" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="1093b6bb9df85b5925c6a9aad11b75ecd098b5548bd6a1883e1a3cd8ad79f074" name="pacemaker-remote" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="3c2ef9a33d654f12749da9459fcbdde75ec22f349822a4fa9f876fd83d560ff6" name="pacemaker-remote" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="333d51aa6424d7b1037c0b96486f234b235f26686a6c2bde195119d062267021" name="pacemaker-remote" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="5e5e4086981363e57edeece3be9634332f0c0c6d200bde7305c44716d85a8544" name="pacemaker-remote" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="0c36b3e9f1bdde09aadde4e67264201d3f13789c594bdc080cdee6174efe4e4c" name="pacemaker-remote" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="49ac5dbd1cbd1f1c9329ba2f427cf90f3f97b7c1d7b9b3ef3a77d3e22c66d613" name="pacemaker-remote" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="2d427624ae6e78de73bf182f06a248e4415da052f6b723c8acc97b1ac561318a" name="pacemaker-remote" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="404b5dbf9fe9d1a54e51a47cb6a4aafaf6140a573847ace6877da0ed69570f10" name="pacemaker-remote" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="f65f31faeaa3e091fb3e3eb65e4cefcdaf25fb01d0618f63566a569e70b8ccc3" name="pacemaker-remote" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="308b4a31680eec536f5f306288fa56d9bbbf4f4fc2d6d77521f8c71fe06c3453" name="pacemaker-remote" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="22699bb3d549b67bcdb324d82ee15453c1a47748321720898e5ade4d4e071c20" name="pam_ssh_agent_auth" arch="i686">
  <version epoch="0" ver="0.10.3" rel="1.12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="7ff4e810c0940ae7c611dbed83ff475887fb8ec9b5ea3ce8d48a39248202b71b" name="pam_ssh_agent_auth" arch="x86_64">
  <version epoch="0" ver="0.10.3" rel="1.12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="f0a726ddc0327a7944c4ce5fb085cf3b7d4f31b96c92766097f413f07aa0ea33" name="pam_ssh_agent_auth" arch="i686">
  <version epoch="0" ver="0.10.3" rel="1.13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="5336ae548c12bcd3b3a70432da98ee5ad8880a34a1804eb92546f1775f4dba33" name="pam_ssh_agent_auth" arch="x86_64">
  <version epoch="0" ver="0.10.3" rel="1.13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="a9816e9d9d8555e2669bff066bf74c6a310f0ca76c065045287a1d2da4f6e528" name="patch" arch="i686">
  <version epoch="0" ver="2.7.1" rel="10.el7_5"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-1" date="1350561600">- Fixed license (since 2.6 it has been GPLv3+).
- 2.7.1.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.7.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-3" date="1363003200">- Upstream patch to fix removal of empty directories (bug #919489).</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 2.7.1-4" date="1364212800">- Build with xattr support.
- Make build output more verbose.
- Fix bogus date in %changelog.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-5" date="1365681600">- Don't document unsupported -m option; document -x option (bug #948972).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-6" date="1371038400">- Don't segfault when given bad arguments (bug #972330).</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-9" date="1523275200">- Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-10" date="1523620800">- Fixed Coverity reported issues</changelog>
</package>
<package pkgid="8db8ff4d4b82f9bd4ec1d10ff6d90ca0f41c1e8e961c0c9e375b844a1828ea72" name="patch" arch="src">
  <version epoch="0" ver="2.7.1" rel="10.el7_5"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-1" date="1350561600">- Fixed license (since 2.6 it has been GPLv3+).
- 2.7.1.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.7.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-3" date="1363003200">- Upstream patch to fix removal of empty directories (bug #919489).</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 2.7.1-4" date="1364212800">- Build with xattr support.
- Make build output more verbose.
- Fix bogus date in %changelog.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-5" date="1365681600">- Don't document unsupported -m option; document -x option (bug #948972).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-6" date="1371038400">- Don't segfault when given bad arguments (bug #972330).</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-9" date="1523275200">- Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-10" date="1523620800">- Fixed Coverity reported issues</changelog>
</package>
<package pkgid="c5176550d734d7fec8614f4b9595f2bb7d1c7bca9581aa15ebd6842ba9031897" name="patch" arch="src">
  <version epoch="0" ver="2.7.1" rel="10.el7_5"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-1" date="1350561600">- Fixed license (since 2.6 it has been GPLv3+).
- 2.7.1.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.7.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-3" date="1363003200">- Upstream patch to fix removal of empty directories (bug #919489).</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 2.7.1-4" date="1364212800">- Build with xattr support.
- Make build output more verbose.
- Fix bogus date in %changelog.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-5" date="1365681600">- Don't document unsupported -m option; document -x option (bug #948972).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-6" date="1371038400">- Don't segfault when given bad arguments (bug #972330).</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-9" date="1523275200">- Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-10" date="1523620800">- Fixed Coverity reported issues</changelog>
</package>
<package pkgid="e5db4d30070e92ec51f39d88dc78dacc9d79a3634cb14d42d0272245fdd0ddfd" name="patch" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="10.el7_5"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-1" date="1350561600">- Fixed license (since 2.6 it has been GPLv3+).
- 2.7.1.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.7.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-3" date="1363003200">- Upstream patch to fix removal of empty directories (bug #919489).</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 2.7.1-4" date="1364212800">- Build with xattr support.
- Make build output more verbose.
- Fix bogus date in %changelog.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-5" date="1365681600">- Don't document unsupported -m option; document -x option (bug #948972).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-6" date="1371038400">- Don't segfault when given bad arguments (bug #972330).</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-9" date="1523275200">- Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-10" date="1523620800">- Fixed Coverity reported issues</changelog>
</package>
<package pkgid="28e70c01f3d83a8c9d7452b99a74344bbb24f5ee92ad50ba9c9f2ad92b9327df" name="patch-debuginfo" arch="i686">
  <version epoch="0" ver="2.7.1" rel="10.el7_5"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-1" date="1350561600">- Fixed license (since 2.6 it has been GPLv3+).
- 2.7.1.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.7.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-3" date="1363003200">- Upstream patch to fix removal of empty directories (bug #919489).</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 2.7.1-4" date="1364212800">- Build with xattr support.
- Make build output more verbose.
- Fix bogus date in %changelog.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-5" date="1365681600">- Don't document unsupported -m option; document -x option (bug #948972).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-6" date="1371038400">- Don't segfault when given bad arguments (bug #972330).</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-9" date="1523275200">- Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-10" date="1523620800">- Fixed Coverity reported issues</changelog>
</package>
<package pkgid="6aec3c0226897ff198697ec2559f4f9f82644dd10782808ac258b6e7d76deb24" name="patch-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="10.el7_5"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-1" date="1350561600">- Fixed license (since 2.6 it has been GPLv3+).
- 2.7.1.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.7.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-3" date="1363003200">- Upstream patch to fix removal of empty directories (bug #919489).</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 2.7.1-4" date="1364212800">- Build with xattr support.
- Make build output more verbose.
- Fix bogus date in %changelog.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-5" date="1365681600">- Don't document unsupported -m option; document -x option (bug #948972).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-6" date="1371038400">- Don't segfault when given bad arguments (bug #972330).</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-9" date="1523275200">- Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-10" date="1523620800">- Fixed Coverity reported issues</changelog>
</package>
<package pkgid="39ee2d7e879c3b71957f2090e58b3d2afd55ea5f4d31b6cbf166c480edd8b1e9" name="pcs" arch="i686">
  <version epoch="0" ver="0.9.158" rel="6.el7.centos.1"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.156-2" date="1488283200">- Added ppc64le architecture
- Resolves: rhbz#1402573</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.157-1" date="1491825600">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1362493 rhbz#1315627 rhbz#1378742 rhbz#1334429 rhbz#1402374 rhbz#1389941 rhbz#1303969 rhbz#1415080 rhbz#1328882 rhbz#1434972 rhbz#1413958</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-1" date="1495540800">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1447702 rhbz#1176018 rhbz#1433016 rhbz#1303969 rhbz#1386114 rhbz#1386512 rhbz#1390609 rhbz#1165821 rhbz#1315992 rhbz#1373614 rhbz#1422667 rhbz#1254984</changelog>
  <changelog author="Tomas Jelinek &lt;tojeline@redhat.com&gt; - 0.9.158-2" date="1495800000">- Fixed crash of the `pcs cluster setup` command when the `--force` flag was used
- Fixed crash of the `pcs cluster destroy --all` command when the cluster was not running
- Fixed crash of the `pcs config restore` command when restoring pacemaker authkey
- Fixed "Error: unable to get cib" when adding a node to a stopped cluster
- Resolves: rhbz#1176018</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-3" date="1496232000">- Added option to create not hardened cluster with the `pcs cluster setup` command using the `--no-hardened` flag
- Added option to create not hardened cluster from web UI
- Fixed a crash in the `pcs cluster node add-remote` command when an id conflict occurs
- Fixed creating a new cluster from the web UI
- `pcs cluster node add-guest` now works with the flag `--skipp-offline`
- `pcs cluster node remove-guest` can be run again when the guest node was unreachable first time
- Fixed "Error: Unable to read /etc/corosync/corosync.conf" when running `pcs resource create`([rhbz#1386114])
- Binary data are stored in corosync authkey
- Resolves: rhbz#1284404 rhbz#1373614 rhbz#1165821 rhbz#1176018 rhbz#1386114</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-4" date="1496750400">- Added support for enable and disable in bundles
- New clusters are created with corosync encryption disabled by default
- Flag `--master` is backward compatible in `pcs resource create`
- Resolves: rhbz#1165821 rhbz#1433016 rhbz#1458153</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-5" date="1496923200">- `pcs cluster setup` uses existing pacemaker authkey if it exists
- `pcs resource create` shows only warning when case of remote node is detected
- Resolves: rhbz#1459503</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-6" date="1497528000">- It is now possible to disable, enable, unmanage and manage bundle resources and set their meta attributes
- Fixed timeout when cluster setup takes long time in web UI
- It is now mandatory to specify container type in the "resource bundle create" command
- Resolves: rhbz#1447910 rhbz#1284404</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-6.el7_4.1" date="1509364800">- `resurce update` no longer exits with an error when the `remote-node` meta attribute is set to the same value that it already has
- Resolves: rhbz#1507399</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;  0.9.158-6.el7_4.1" date="1512043200">- Manually Debreand PCS</changelog>
</package>
<package pkgid="6b493273583b7b85e4ccd6e43716dba2223286a5a70e909ad1fd6ae1c42d8449" name="pcs" arch="src">
  <version epoch="0" ver="0.9.158" rel="6.el7.centos.1"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.156-2" date="1488283200">- Added ppc64le architecture
- Resolves: rhbz#1402573</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.157-1" date="1491825600">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1362493 rhbz#1315627 rhbz#1378742 rhbz#1334429 rhbz#1402374 rhbz#1389941 rhbz#1303969 rhbz#1415080 rhbz#1328882 rhbz#1434972 rhbz#1413958</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-1" date="1495540800">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1447702 rhbz#1176018 rhbz#1433016 rhbz#1303969 rhbz#1386114 rhbz#1386512 rhbz#1390609 rhbz#1165821 rhbz#1315992 rhbz#1373614 rhbz#1422667 rhbz#1254984</changelog>
  <changelog author="Tomas Jelinek &lt;tojeline@redhat.com&gt; - 0.9.158-2" date="1495800000">- Fixed crash of the `pcs cluster setup` command when the `--force` flag was used
- Fixed crash of the `pcs cluster destroy --all` command when the cluster was not running
- Fixed crash of the `pcs config restore` command when restoring pacemaker authkey
- Fixed "Error: unable to get cib" when adding a node to a stopped cluster
- Resolves: rhbz#1176018</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-3" date="1496232000">- Added option to create not hardened cluster with the `pcs cluster setup` command using the `--no-hardened` flag
- Added option to create not hardened cluster from web UI
- Fixed a crash in the `pcs cluster node add-remote` command when an id conflict occurs
- Fixed creating a new cluster from the web UI
- `pcs cluster node add-guest` now works with the flag `--skipp-offline`
- `pcs cluster node remove-guest` can be run again when the guest node was unreachable first time
- Fixed "Error: Unable to read /etc/corosync/corosync.conf" when running `pcs resource create`([rhbz#1386114])
- Binary data are stored in corosync authkey
- Resolves: rhbz#1284404 rhbz#1373614 rhbz#1165821 rhbz#1176018 rhbz#1386114</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-4" date="1496750400">- Added support for enable and disable in bundles
- New clusters are created with corosync encryption disabled by default
- Flag `--master` is backward compatible in `pcs resource create`
- Resolves: rhbz#1165821 rhbz#1433016 rhbz#1458153</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-5" date="1496923200">- `pcs cluster setup` uses existing pacemaker authkey if it exists
- `pcs resource create` shows only warning when case of remote node is detected
- Resolves: rhbz#1459503</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-6" date="1497528000">- It is now possible to disable, enable, unmanage and manage bundle resources and set their meta attributes
- Fixed timeout when cluster setup takes long time in web UI
- It is now mandatory to specify container type in the "resource bundle create" command
- Resolves: rhbz#1447910 rhbz#1284404</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-6.el7_4.1" date="1509364800">- `resurce update` no longer exits with an error when the `remote-node` meta attribute is set to the same value that it already has
- Resolves: rhbz#1507399</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;  0.9.158-6.el7_4.1" date="1512043200">- Manually Debreand PCS</changelog>
</package>
<package pkgid="350b5faaa2cd3e3e7029b2ef3ab707f30f30e9ab1133f6e179a76dcafff55d8d" name="pcs" arch="src">
  <version epoch="0" ver="0.9.158" rel="6.el7.centos.1"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.156-2" date="1488283200">- Added ppc64le architecture
- Resolves: rhbz#1402573</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.157-1" date="1491825600">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1362493 rhbz#1315627 rhbz#1378742 rhbz#1334429 rhbz#1402374 rhbz#1389941 rhbz#1303969 rhbz#1415080 rhbz#1328882 rhbz#1434972 rhbz#1413958</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-1" date="1495540800">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1447702 rhbz#1176018 rhbz#1433016 rhbz#1303969 rhbz#1386114 rhbz#1386512 rhbz#1390609 rhbz#1165821 rhbz#1315992 rhbz#1373614 rhbz#1422667 rhbz#1254984</changelog>
  <changelog author="Tomas Jelinek &lt;tojeline@redhat.com&gt; - 0.9.158-2" date="1495800000">- Fixed crash of the `pcs cluster setup` command when the `--force` flag was used
- Fixed crash of the `pcs cluster destroy --all` command when the cluster was not running
- Fixed crash of the `pcs config restore` command when restoring pacemaker authkey
- Fixed "Error: unable to get cib" when adding a node to a stopped cluster
- Resolves: rhbz#1176018</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-3" date="1496232000">- Added option to create not hardened cluster with the `pcs cluster setup` command using the `--no-hardened` flag
- Added option to create not hardened cluster from web UI
- Fixed a crash in the `pcs cluster node add-remote` command when an id conflict occurs
- Fixed creating a new cluster from the web UI
- `pcs cluster node add-guest` now works with the flag `--skipp-offline`
- `pcs cluster node remove-guest` can be run again when the guest node was unreachable first time
- Fixed "Error: Unable to read /etc/corosync/corosync.conf" when running `pcs resource create`([rhbz#1386114])
- Binary data are stored in corosync authkey
- Resolves: rhbz#1284404 rhbz#1373614 rhbz#1165821 rhbz#1176018 rhbz#1386114</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-4" date="1496750400">- Added support for enable and disable in bundles
- New clusters are created with corosync encryption disabled by default
- Flag `--master` is backward compatible in `pcs resource create`
- Resolves: rhbz#1165821 rhbz#1433016 rhbz#1458153</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-5" date="1496923200">- `pcs cluster setup` uses existing pacemaker authkey if it exists
- `pcs resource create` shows only warning when case of remote node is detected
- Resolves: rhbz#1459503</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-6" date="1497528000">- It is now possible to disable, enable, unmanage and manage bundle resources and set their meta attributes
- Fixed timeout when cluster setup takes long time in web UI
- It is now mandatory to specify container type in the "resource bundle create" command
- Resolves: rhbz#1447910 rhbz#1284404</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-6.el7_4.1" date="1509364800">- `resurce update` no longer exits with an error when the `remote-node` meta attribute is set to the same value that it already has
- Resolves: rhbz#1507399</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;  0.9.158-6.el7_4.1" date="1512043200">- Manually Debreand PCS</changelog>
</package>
<package pkgid="26e5c2f2b2ee4dcc0eb35d21f50b70c942acf09d55926efc77253f3519d1bf2a" name="pcs" arch="x86_64">
  <version epoch="0" ver="0.9.158" rel="6.el7.centos.1"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.156-2" date="1488283200">- Added ppc64le architecture
- Resolves: rhbz#1402573</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.157-1" date="1491825600">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1362493 rhbz#1315627 rhbz#1378742 rhbz#1334429 rhbz#1402374 rhbz#1389941 rhbz#1303969 rhbz#1415080 rhbz#1328882 rhbz#1434972 rhbz#1413958</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-1" date="1495540800">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1447702 rhbz#1176018 rhbz#1433016 rhbz#1303969 rhbz#1386114 rhbz#1386512 rhbz#1390609 rhbz#1165821 rhbz#1315992 rhbz#1373614 rhbz#1422667 rhbz#1254984</changelog>
  <changelog author="Tomas Jelinek &lt;tojeline@redhat.com&gt; - 0.9.158-2" date="1495800000">- Fixed crash of the `pcs cluster setup` command when the `--force` flag was used
- Fixed crash of the `pcs cluster destroy --all` command when the cluster was not running
- Fixed crash of the `pcs config restore` command when restoring pacemaker authkey
- Fixed "Error: unable to get cib" when adding a node to a stopped cluster
- Resolves: rhbz#1176018</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-3" date="1496232000">- Added option to create not hardened cluster with the `pcs cluster setup` command using the `--no-hardened` flag
- Added option to create not hardened cluster from web UI
- Fixed a crash in the `pcs cluster node add-remote` command when an id conflict occurs
- Fixed creating a new cluster from the web UI
- `pcs cluster node add-guest` now works with the flag `--skipp-offline`
- `pcs cluster node remove-guest` can be run again when the guest node was unreachable first time
- Fixed "Error: Unable to read /etc/corosync/corosync.conf" when running `pcs resource create`([rhbz#1386114])
- Binary data are stored in corosync authkey
- Resolves: rhbz#1284404 rhbz#1373614 rhbz#1165821 rhbz#1176018 rhbz#1386114</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-4" date="1496750400">- Added support for enable and disable in bundles
- New clusters are created with corosync encryption disabled by default
- Flag `--master` is backward compatible in `pcs resource create`
- Resolves: rhbz#1165821 rhbz#1433016 rhbz#1458153</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-5" date="1496923200">- `pcs cluster setup` uses existing pacemaker authkey if it exists
- `pcs resource create` shows only warning when case of remote node is detected
- Resolves: rhbz#1459503</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-6" date="1497528000">- It is now possible to disable, enable, unmanage and manage bundle resources and set their meta attributes
- Fixed timeout when cluster setup takes long time in web UI
- It is now mandatory to specify container type in the "resource bundle create" command
- Resolves: rhbz#1447910 rhbz#1284404</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-6.el7_4.1" date="1509364800">- `resurce update` no longer exits with an error when the `remote-node` meta attribute is set to the same value that it already has
- Resolves: rhbz#1507399</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;  0.9.158-6.el7_4.1" date="1512043200">- Manually Debreand PCS</changelog>
</package>
<package pkgid="e8d84a39dd8ab01cf44112c576b53be6bd1972329f2b91fb1e3e80a578f8193c" name="pcs-debuginfo" arch="i686">
  <version epoch="0" ver="0.9.158" rel="6.el7.centos.1"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.156-2" date="1488283200">- Added ppc64le architecture
- Resolves: rhbz#1402573</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.157-1" date="1491825600">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1362493 rhbz#1315627 rhbz#1378742 rhbz#1334429 rhbz#1402374 rhbz#1389941 rhbz#1303969 rhbz#1415080 rhbz#1328882 rhbz#1434972 rhbz#1413958</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-1" date="1495540800">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1447702 rhbz#1176018 rhbz#1433016 rhbz#1303969 rhbz#1386114 rhbz#1386512 rhbz#1390609 rhbz#1165821 rhbz#1315992 rhbz#1373614 rhbz#1422667 rhbz#1254984</changelog>
  <changelog author="Tomas Jelinek &lt;tojeline@redhat.com&gt; - 0.9.158-2" date="1495800000">- Fixed crash of the `pcs cluster setup` command when the `--force` flag was used
- Fixed crash of the `pcs cluster destroy --all` command when the cluster was not running
- Fixed crash of the `pcs config restore` command when restoring pacemaker authkey
- Fixed "Error: unable to get cib" when adding a node to a stopped cluster
- Resolves: rhbz#1176018</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-3" date="1496232000">- Added option to create not hardened cluster with the `pcs cluster setup` command using the `--no-hardened` flag
- Added option to create not hardened cluster from web UI
- Fixed a crash in the `pcs cluster node add-remote` command when an id conflict occurs
- Fixed creating a new cluster from the web UI
- `pcs cluster node add-guest` now works with the flag `--skipp-offline`
- `pcs cluster node remove-guest` can be run again when the guest node was unreachable first time
- Fixed "Error: Unable to read /etc/corosync/corosync.conf" when running `pcs resource create`([rhbz#1386114])
- Binary data are stored in corosync authkey
- Resolves: rhbz#1284404 rhbz#1373614 rhbz#1165821 rhbz#1176018 rhbz#1386114</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-4" date="1496750400">- Added support for enable and disable in bundles
- New clusters are created with corosync encryption disabled by default
- Flag `--master` is backward compatible in `pcs resource create`
- Resolves: rhbz#1165821 rhbz#1433016 rhbz#1458153</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-5" date="1496923200">- `pcs cluster setup` uses existing pacemaker authkey if it exists
- `pcs resource create` shows only warning when case of remote node is detected
- Resolves: rhbz#1459503</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-6" date="1497528000">- It is now possible to disable, enable, unmanage and manage bundle resources and set their meta attributes
- Fixed timeout when cluster setup takes long time in web UI
- It is now mandatory to specify container type in the "resource bundle create" command
- Resolves: rhbz#1447910 rhbz#1284404</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-6.el7_4.1" date="1509364800">- `resurce update` no longer exits with an error when the `remote-node` meta attribute is set to the same value that it already has
- Resolves: rhbz#1507399</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;  0.9.158-6.el7_4.1" date="1512043200">- Manually Debreand PCS</changelog>
</package>
<package pkgid="f769b592bc4eb8c07109628b022793596f2043cc0f9c11ac5649bce94e7a95a6" name="pcs-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.9.158" rel="6.el7.centos.1"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.156-2" date="1488283200">- Added ppc64le architecture
- Resolves: rhbz#1402573</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.157-1" date="1491825600">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1362493 rhbz#1315627 rhbz#1378742 rhbz#1334429 rhbz#1402374 rhbz#1389941 rhbz#1303969 rhbz#1415080 rhbz#1328882 rhbz#1434972 rhbz#1413958</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-1" date="1495540800">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1447702 rhbz#1176018 rhbz#1433016 rhbz#1303969 rhbz#1386114 rhbz#1386512 rhbz#1390609 rhbz#1165821 rhbz#1315992 rhbz#1373614 rhbz#1422667 rhbz#1254984</changelog>
  <changelog author="Tomas Jelinek &lt;tojeline@redhat.com&gt; - 0.9.158-2" date="1495800000">- Fixed crash of the `pcs cluster setup` command when the `--force` flag was used
- Fixed crash of the `pcs cluster destroy --all` command when the cluster was not running
- Fixed crash of the `pcs config restore` command when restoring pacemaker authkey
- Fixed "Error: unable to get cib" when adding a node to a stopped cluster
- Resolves: rhbz#1176018</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-3" date="1496232000">- Added option to create not hardened cluster with the `pcs cluster setup` command using the `--no-hardened` flag
- Added option to create not hardened cluster from web UI
- Fixed a crash in the `pcs cluster node add-remote` command when an id conflict occurs
- Fixed creating a new cluster from the web UI
- `pcs cluster node add-guest` now works with the flag `--skipp-offline`
- `pcs cluster node remove-guest` can be run again when the guest node was unreachable first time
- Fixed "Error: Unable to read /etc/corosync/corosync.conf" when running `pcs resource create`([rhbz#1386114])
- Binary data are stored in corosync authkey
- Resolves: rhbz#1284404 rhbz#1373614 rhbz#1165821 rhbz#1176018 rhbz#1386114</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-4" date="1496750400">- Added support for enable and disable in bundles
- New clusters are created with corosync encryption disabled by default
- Flag `--master` is backward compatible in `pcs resource create`
- Resolves: rhbz#1165821 rhbz#1433016 rhbz#1458153</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-5" date="1496923200">- `pcs cluster setup` uses existing pacemaker authkey if it exists
- `pcs resource create` shows only warning when case of remote node is detected
- Resolves: rhbz#1459503</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-6" date="1497528000">- It is now possible to disable, enable, unmanage and manage bundle resources and set their meta attributes
- Fixed timeout when cluster setup takes long time in web UI
- It is now mandatory to specify container type in the "resource bundle create" command
- Resolves: rhbz#1447910 rhbz#1284404</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-6.el7_4.1" date="1509364800">- `resurce update` no longer exits with an error when the `remote-node` meta attribute is set to the same value that it already has
- Resolves: rhbz#1507399</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;  0.9.158-6.el7_4.1" date="1512043200">- Manually Debreand PCS</changelog>
</package>
<package pkgid="41fdc12e7566e42f498f7d699c4ba7f14c2c384a32694895886544f2caf44f7c" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.1.1.el7" date="1502798400">- Apply debranding changes</changelog>
</package>
<package pkgid="4e75355af018256db3fedeae1007a3f2b8748be72eebcf91e3ac469913a439ed" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7.centos.plus"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.11.1.el7.centos.plus]" date="1512043200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="6a4b65e8c72194dbf3ed1508233a9a9068eb398ee64b4a26d583e0cf2167fb55" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.1.el7" date="1512043200">- Apply debranding changes</changelog>
</package>
<package pkgid="086a07669a43bb57c4519f8d7d21f6a551dc3ca0739743b62bb27ecb550d7e6a" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7.centos.plus"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.11.6.el7.centos.plus]" date="1515672000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="7bab6279fe246b5767c2f2bd3ab3af5d66fd327e9984177d33711813a05ba8ee" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.6.el7" date="1514980800">- Apply debranding changes</changelog>
</package>
<package pkgid="987b59f19eda59620191b08d2bf4ef60ea27a4e152720a11ca6c1c6999535691" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="ae0aa430803db4648ddbcba4560c0cdc57c67c50a64544b8a201f38c3dca212d" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="36b81aeed533b98a53c91f43bc6406be77652a34f0e3b3fcb597d35a88c81231" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7.centos.plus"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.2.2.el7.centos.plus rc1]" date="1505217600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]</changelog>
  <changelog author="T.Kabe &lt;kabe@&gt; [3.10.0-693.2.2.el7.centos.plus rc2]" date="1505908800">- Add i686 mods (i686-7-4.patch) [bug#13890]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.2.2.el7.centos.plus]" date="1506168000">- Enabled xen
- more i686 mod (firmware-efi-32bit.patch) [ay]</changelog>
</package>
<package pkgid="40d185ececf8238960c0bc7d45f70429f1cd611a2efdfd8351eaa84fc1112b97" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="2e210c4ff9a8450d565caac4885efbcc751fd1fa50696f8e3b1e382290486f6f" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="2fad9f2afc7718cd2d7bdc204870c711bc578cfad381da81105b0bb6c8b84b32" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="e4f1e1cb15d98ec84def44ffaa2023d7e94ab4567c59e7ac750e556b441a4ec9" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="131194c6582dea769102946aa5d53fe1a4bc2a9dbfc6de1f336ee9950fe8621f" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="8c9d673a2c1460ed4dcdcc6e696338e5d04ed282280dd88750d889e649115f07" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="818b3485be1023ab12abca73cf9ceba5a518d9669759e23cdea125365eb0e2e2" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="79e7690882dc6db2a62c2aa84c0bbfed4e047c3790b50a60b39a30bbc577a33c" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="54bd5014dbe3548c2814543b42752223ea799015a1aaa70ea42a7d6d80e8a619" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7.centos.plus"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.5.2.el7.centos.plus]" date="1508414400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="5e414803cfdcfdb161a477c78ae91de72f0e643f88b195adb4c4249053cd3cb7" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.5.2.el7" date="1508414400">- Apply debranding changes</changelog>
</package>
<package pkgid="d0362a5c9ceea1f917a70be279a512d3393210721a4f35868c327153c7e0ccf0" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.1.1.el7" date="1502798400">- Apply debranding changes</changelog>
</package>
<package pkgid="6735182a22cf67a192bd9f64b8d1031006b1f4b3916c064748f7b3950878bf59" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7.centos.plus"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.11.1.el7.centos.plus]" date="1512043200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="ada75250b4d1fa64ff0120dc41a8b8e699bb12ed616e32965bc4838dfa4a90b3" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.1.el7" date="1512043200">- Apply debranding changes</changelog>
</package>
<package pkgid="d4376de73ef76154876249e73655b8c90fdbcf4aaf8f71293708eaca40d6bf1d" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7.centos.plus"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.11.6.el7.centos.plus]" date="1515672000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="f6c1ce0c7cb1358b133950e778d258f22f49280a4e2ff0474ca7044b8802b4a1" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="6297a57529daaf010ea5c52ce017b7d7c32ea3b917fd587da60dbb8f38a44c7d" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="fd7b1a3b15260e60f6e24d380ae112028c9f843bd7282decd5b12a93ce953f64" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7.centos.plus"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.2.2.el7.centos.plus rc1]" date="1505217600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]</changelog>
  <changelog author="T.Kabe &lt;kabe@&gt; [3.10.0-693.2.2.el7.centos.plus rc2]" date="1505908800">- Add i686 mods (i686-7-4.patch) [bug#13890]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.2.2.el7.centos.plus]" date="1506168000">- Enabled xen
- more i686 mod (firmware-efi-32bit.patch) [ay]</changelog>
</package>
<package pkgid="4511d06a4e3fbc469c3153ae4a0bf28218cfe8090a225f1d032145941fa27364" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="c7316d5b931cdbf9dfe029c03d38950df41d5f61a918504eb9d2b4e0453c8447" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="59cec4d9cf4c3b2f400b81ec410f02f8fab7e1bbd74f6506bb0b45e9040bf4d1" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="f61e5b07bbde65686d656a95964c09ba0cfd57e8170f6bb800a0de9dc8c813bc" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="c4158f8f1742ac3dc83516f4f00ab4dcf7e325d96f2e9e5d21a5204ee06234dc" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="76c6edd4b7369239a326d20db93ed86b8537599346de7cc8b1c5909e8937dcb1" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="d715d111fc491635293a7bd9378a666158349c63bd7d11e60c0fd5420bfa5b1e" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="f2c9637a9479f78a9b1af9ed91aecd48a8cf875f52dbf10c764f2af2e2e92a64" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="74cc7e5806922e7b29b84e2fc0545c4bb0e3dcc5461bd17daf4fdcad00b6cf62" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7.centos.plus"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.5.2.el7.centos.plus]" date="1508414400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="91a50be1dcb520f5f7557908cc9695d6a16f2bd93ddf84603b0459fcbfd70d25" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.5.2.el7" date="1508414400">- Apply debranding changes</changelog>
</package>
<package pkgid="b147d57bbc0fad549e09a03622d1cc9272d6ce616c349316c8d8cebb6355b799" name="perl-Git" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="12e63a5248310225544cc8e3d837f72c151877b2b6954b989ff52b00e1298c88" name="perl-Git" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="3ec2cf6212b2de934ea1405b0e1cd01c1a1973cc6dc4a9822d306bce44ac0eb7" name="perl-Git-SVN" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="7cfa939d3484362aaf3ecdb6c2695661e572e01471203641a2b7e158fb76ecfb" name="perl-Git-SVN" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="0239c4fe30e271bef7aeb4a5d59622cf1ef30b0326a58f6b5091f6ca34830968" name="perl-Sys-Guestfs" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.50" date="1440936000">- v2v:
  * When debugging, dump OVF to stderr.
  * Ignore missing kernels from grub
    resolves: rhbz#1230412
  * Calculate VMware dcPath correctly (1256823)
  * Map empty VMware network or bridge name to default (1257895)
- p2v:
  * Wait for network to come online before testing connection
    resolves: rhbz#1256222
- Fix tests to run correctly with libguestfs-winsupport 7.2.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.51" date="1441108800">- v2v: Fix handling of extra slashes in dcPath calculation
  resolves: rhbz#1258342 rhbz#1256823
- v2v: Fix -oa preallocation option
  resolves: rhbz#1251909</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
</package>
<package pkgid="5ce0caf0b61089a8ff0f1619b0c22a3b41f26a2bc8d292b0e43d018bd93f750d" name="perl-Sys-Guestfs" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="98bf44f3eb94d94fe64ddf33d74c58c5e53564f948670f345fbe021a7694de9b" name="php" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="16afd35e55bbe0821fa46280fd2d82dd2e1bf4e4c6ed25e508b924388ed0a724" name="php" arch="src">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="0ca028df0232b3eabd4ae7ad06eb2005a906aebb597b841ab45a8c7b47315fef" name="php" arch="src">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="972abe2da57f7902a3068bc391635e4ef91ba3166be17ab83257004273e366fd" name="php" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="d0c22288f980a7e8045770d6e0430af999a60f7c87767841ff7aa033b6abbc68" name="php" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="f5ea849f961c0b5442387520f158cf94bf25e502fbd98446d07d334fbdfd19fa" name="php" arch="src">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="31ce6fa1f97c507a4b9ed0bae14789aa55951cd48733cd44e8d06f1d1b32a4c2" name="php" arch="src">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="cb0cd47085849a679b95396b96c3d6425de8c9f3509e60eee0282ea49b0f9521" name="php" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="eadf3ae443eac72db989ecbec9dd568872e77da44e5459bc0b8425fa23ccf6ef" name="php-bcmath" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="1dfcf9216903357ab5e0c7548d33a6b1b23db2adef02b5da9521308a94acb290" name="php-bcmath" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="1c850c44c8aebcae39f7e430ab9159666c0fee0ffb7c461d5f2cd72c4b8b0802" name="php-bcmath" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="50fe1c1533fe413e704847d640a08633d48772afab205cedb4642d87523b3944" name="php-bcmath" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="3e0daeabe5a7c27f255b469dd15e3e3530ce8ca4615f69d5d1229487ede8e41d" name="php-cli" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="1b40cc10835d8abe79590cf65a2636dd199c59b3c965d1fece6c3329aab2ff7f" name="php-cli" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="de585b4ecbef68ff4290ddb63e25c5ab080aea0cd2fd8fcc2546437fc6c8b52a" name="php-cli" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="ef46747c0e3da64891fa0ae1cd7dcabef425ae1362359c7a33a375a9b69465ec" name="php-cli" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="79c152a637d8dd95a7988dd38e3f4912a6d60a9583f9a234a2d6cc048b099755" name="php-common" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="5b02a875d516e14d0ddbe616887defd64c49bdbecdcb63aefa1581d42d195a53" name="php-common" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="72bf225742de2e4134eceb94067a87da91725a289ed6bf94df245208fe6b7c64" name="php-common" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="bfc970d746e8fce612e9fa70928856656048368745db681f8409b3fcb191428c" name="php-common" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="3f5a82951a07ae731a35a5922fd8e3ea9a3850cc16ea8760b56d4cb79eb99da2" name="php-dba" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="54c1a74a5fb3eda11572f39dd92d451829c2d124ce56b6b6b4b6e4d90be4b6c7" name="php-dba" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="f09f75a53f61647eb0382ba15924cb1e304da268975020a0c2a83152f4377198" name="php-dba" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="12dc36aaab020d3ca9a8952739848dcec3786cce87e37ba1bdc9cdf4187a9822" name="php-dba" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="caa1b30a888ce2a15c6b7e0f340b7148fa74ea3723a8bd4971fc3fe57d78f867" name="php-debuginfo" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="1d79a95f092907afbc142cef012221ce3237a64a053e522d8c711fdaa7dc27bf" name="php-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="bc619079552308e048d7d24c0f6c9c96aa07c8e254a4b03200f4cadd25f22f9b" name="php-debuginfo" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="9fb492e266c07f1283b8b1eb949ceef116fe09ca574ceaa67697a258c7ff4d6f" name="php-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="5482e909f336e5201c57a45d7d80766c17dc70222fd27dbb287cb1ca7e9c32a2" name="php-devel" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="3f17d256233d7cc0776b0b1a2bdf24dfe559474f361dea60a2d2d87309f999ae" name="php-devel" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="5f0322ddfc6d12a02340bfc556ffa0f6d6f2dfc8f8c4e4a217e1785b5ed92133" name="php-devel" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="9d19f941b446a4e7235e2ae7ec6bf70892c568f4ed4d7fdfd1ecabecc532f61d" name="php-devel" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="7dfa36eca6f92b58bef9b78087d8ea5ae3c7c7a3236de100d8859ba702c94fa6" name="php-embedded" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="17001f3d29ec316009a5baaa3fa8a8da311bb9aa8516b18a6fc46b174e01f955" name="php-embedded" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="690408d02aa7fdc1ba000dc3d812457a1691936b33efa599c2a0128f909dddab" name="php-embedded" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="667716e8a29f7b9977cfc11a45504016456af95556da81fb15c1702a06724ac4" name="php-embedded" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="387d31157212bd1cb65e5b773eafae36645221999f8126898ad36bcf4042de25" name="php-enchant" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="8888a77b9715ceff6184d1e76ca2ef7a9ea91bab0030e6c5905d80cc22398c94" name="php-enchant" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="537d2080bdaa8f668ead0d82584f218aee5e7212dc3a35c99b77481e7ba2e102" name="php-enchant" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="91be4a13ca111ef9bcf2c368ef88e19ae9c61e64f86cddc7b7b6cfbe2a713d16" name="php-enchant" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="2366f5a907d5d52b0041c57a3cda3c06d5cba4f698ec3dfb3aa54af89f742a9e" name="php-fpm" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="52eecf434aa0232742b5a8781d05fb89896b3902247ba570ba025d8f31cf0c9f" name="php-fpm" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="bf57d7197889c24c98e54511d1eba516c3c24d849748d5b81e350d23ab0d03cb" name="php-fpm" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="6e830f2978ac353a5b5193f3260b4c64b36f5a988fb97376f91af6ac898fe0b9" name="php-fpm" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="e03d29f6b082c90ebc740ef6b68c6512049f902d07af02c430bdbabe302ab308" name="php-gd" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="66b6c5b3353352edf313e090144f7abf437c4d10ca0ab910147d4558bc608626" name="php-gd" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="1807b8a59b0aaf4a29cdd84729512218433b0e2ef73c48718338bd93bd511af7" name="php-gd" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="34452dad6c58b40f33551f6a9fb170948d111b5ed826a2c11454f41b2780d051" name="php-gd" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="ee4bb43e4a8670b480339c64fc8b6bdccacda16e721f72ed959aa0f1d689dacc" name="php-intl" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="03850e3190d941da81bc86983bb5104b9f56ab2f768288ad6c03a7e079d0dadd" name="php-intl" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="b2fb99b5904042fad0f6176dc612ee8b239566347862a183c829aa2f20bb9cbd" name="php-intl" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="a271c65137525c6ac6e868ae0fba8a3385d5d63f8bc1c66cf3da1a8429557b74" name="php-intl" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="1a3bf0b127dea788d934c8c24005fa5b1f87757c63299d2ab95966316a155d2f" name="php-ldap" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="f9bb3f273b9eb726a279065a8dd3defdd8f1c77e234a4091be2176500f4bbeba" name="php-ldap" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="7246bc84f7eee443d4326cb7346017847e06ffc5f0cf77d390953fa9599c5d12" name="php-ldap" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="52b294ee416f09e2ff93e6fce405d63523fee154d2ca0978de531230e1896faa" name="php-ldap" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="6220846457dcb3f3943c7aed6ef82301746eeb44668ece125514d8f15dec6cac" name="php-mbstring" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="4f5dd37d4b7c0b2aa5ff8887fe1b049cacb1c863e9315b063295ffd25298e421" name="php-mbstring" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="5e2343db1815c47fc9393bcded330bb6be938f901611f13bd8a30c8c9d702ef6" name="php-mbstring" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="84d67f5a21ad785a647afca2202fc7a6c27fd10d6da507e7b8246fe4ea5a8a43" name="php-mbstring" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="ed3360d00e2308aaefa81f0e884e2abd16da6bc1c035e2518f2b854002a8bb4d" name="php-mysql" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="d3bb89222b849d4ae26395d330d058277802afd4a340df303e178d9f50b8ee1f" name="php-mysql" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="a621e72bd22fe80a0c5b41c8c5323873cd0ea649a0898d2bc23799c4f6083ee5" name="php-mysql" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="625371fa07e13afa1672650790d2b52f7678eb45594b4ce7fa29e2f8e0e4aa62" name="php-mysql" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="31e6c196b25fb97b1d8baff5da382ccfe5745aa13087d42ff0638550519ed51e" name="php-mysqlnd" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="d67941c2aaf9f9b60527a0885f459b112b4e88e0390f4fce0b3aeab7e52f97c1" name="php-mysqlnd" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="bd414c84fa04b10b115d53fb706f4b558858093162939f3991db9c703ead0655" name="php-mysqlnd" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="68e6f885f4249366595604d096c4e282ca6b98b7a99372af1857ea7f2917bbcb" name="php-mysqlnd" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="ee1eb60ab92a450a009c66056f86e77d0d246b35c73d346b3a679ff85641d034" name="php-odbc" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="2f011a673bfb5a42e1db1dc82fc94fca1d0c35a5f10af221c7140fff6260600f" name="php-odbc" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="d4e3e6c4a72574674ba6a5db6b932de7a128101a6eb2f4924486c4fa023f3317" name="php-odbc" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="9ef02ac38c781ac6cca3c1258172908c2a4b53bd0f47886ac262e19e3e816524" name="php-odbc" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="e0227ba454b693a0d1670491de27966059e02deb062c09102fb99903a112cda0" name="php-pdo" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="b4d349c906807f6ea56c8b5d5aa29d6ad1757ae4e3c72c427d49f2588c204f67" name="php-pdo" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="2a38a10bee987666f51a03fee8c5c9869bffcf500cdf163adbd850e57503d469" name="php-pdo" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="48400f7fb2a219ce519cf839b8f05a6dfbd34b66fff5db475abf910d93b00215" name="php-pdo" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="c26d3cd79aa75707eda076c23edc552bc520856aa4e0895e97b587860ca1ec39" name="php-pgsql" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="5c21a74497c3445c2b2d86b2a7acefe735e37ffcde84cf6486479c25a428654d" name="php-pgsql" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="9cfc0b2d86e52d215102e566e5c064f62835bae2b7e5ea76b84c160a81af487a" name="php-pgsql" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="d0472a446bc193aca44e435d2505f0810e2ef043c97c4b3a5723c0c626c591c1" name="php-pgsql" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="a1061d683fc898c8c92de2aef147d005a49399bdab3b3fd5e89ba55ad772fcae" name="php-process" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="f5b2da3235b6044c92bf958088daba87178de5a667f7aec64a8959ab4a059109" name="php-process" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="fd463ba2e9c29374aee77a6fa48fc843d680b7bf58777af5793f2724b2ddc17b" name="php-process" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="b79c89702768e1746cfcf9588aaedb2bfc9442c449622e4d78e9216e7b07b059" name="php-process" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="743de2248d1b22d1098a1ca2102098506eb9d14b3c64ff37cdabf55585fe25d6" name="php-pspell" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="9579013caa37572110be28bd980dd61701af8631ebe69609dc718ab1c3950562" name="php-pspell" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="b8b84569b9eb6778010dd8d451fa519d887cbc0fdade5eb323fedb90a3094a2a" name="php-pspell" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="7ebf7ddb308592130ccc4d82ca7290a4be9e93420e6b53de1b1ed8c618e39b2a" name="php-pspell" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="99124cf7a761293a80d26ac6501f8cf25f84082140a0ed96f7f7cd82cee9ca8e" name="php-recode" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="de89cea42427c63f68690fb5466612c6a9de2ac0d2fcbd71243ac7283b675533" name="php-recode" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="e2161e951eaa20ed055705d73d0953a6f48d5aadbe011276c317a169f8122096" name="php-recode" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="0a6144a22b8658371427273400134373713b1fc718e682cb1810a17e0db9d2ed" name="php-recode" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="2653be47caa65fb4a538fee9ebbe576b360648a2bf2f035746aee9414abae0e0" name="php-snmp" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="243a0ec9c1d4d0fc7c8f2285755e10361a335f232d0e9ffb244dc90c6df7edf4" name="php-snmp" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="5766c426467b1d592ec9a8cf9df8f48a3466fe993daa612b649c3020ca2a31b4" name="php-snmp" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="04ea5d561af87d42cbfb02782b92b84d9fa62a48b4fe4a4b698c8c325f92e97f" name="php-snmp" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="bc8df3e64c0f4242fb5ec848bfe9ebc6e8724aa43a8f71bd2602fd698d2c2e65" name="php-soap" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="562e33a094e8f02c7ff4868e5f6fbcfad8810b7db2ab367b770ae410bf5e1b05" name="php-soap" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="d4fc6209d4046cfd9ce4d979ed46e02cb953f82ac07b2e699225436487ab5fc1" name="php-soap" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="a579b509d9dae17cca2ff687795cb065635d049db751491ee94c2ec18b2ca5a6" name="php-soap" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="aeb274e66fc8b6bbe1bede7e484b49fc91b5ae38086a8ceb3bebb94dc32d3d15" name="php-xml" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="2c0092769fbbf0892045a6a22f2d9cfd516ecdb775908c49a79ef1c6c37230ab" name="php-xml" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="f7f2e7e5458d0c9b471dcdd9711928ebe47af582c4d05669b9fa526480774713" name="php-xml" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="033d0e102c91e579275d2c97fd39d6414d066e6a2aafc0ecfca63a314640038d" name="php-xml" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="e26fbc26c260e1a450bfc9ee02b51f7216754d324d202c5ec1cac9f0dc3f42df" name="php-xmlrpc" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="7b4b82e0b43802dfb92ca547cce063d51f94b321b459e0e6e3307195b82c7042" name="php-xmlrpc" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="e24060326c541c2134ed098db51ca98df2461d56ffd5cd27158519587610159e" name="php-xmlrpc" arch="i686">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="3990fb0e3bda9aad70d6969ec0c7d8c387b43b3d26edf62d49649d80fd9ff7f7" name="php-xmlrpc" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="30b7255c6830b1b676c776c5d72acd2c9975dfc7ebadd06bcae38886eb2b53f4" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="10.el7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-1" date="1490616000">- Require "nss &gt;= 3.28.3" as a build and runtime requirement
- Require "jss &gt;= 4.4.0-4" as a build and runtime requirement
- Require "tomcatjss &gt;= 7.2.1-3" as a build and runtime requirement
- dogtagpki Pagure Issue #2612 - Unable to clone due to pki pkcs12-cert-find
  failure (edewata)
- ############################################################################
- Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4
- Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.4.x
- ############################################################################
- RHEL 7.4:
- ############################################################################
- ############################################################################
- RHCS 9.2:
- ############################################################################
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1419734 - CC: CMC: id-cmc-identityProofV2 feature
  implementation (cfu)
- Bugzilla Bug #1419742 - CC: CMC: provide Proof of Possession for encryption
  cert requests (cfu)
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1428020 - CC: CMC feature support: provided issuance
  protection cert mechanism (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-2" date="1492430400">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1282504 - Installing pki-server in container reports
  scriptlet failed, exit status 1 (jpazdziora)
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1410650 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHEL) (jmagne)
- Bugzilla Bug #1437591 - cli authentication using expired cert throws an
  exception (edewata)
- Bugzilla Bug #1437602 - non-CA cli looks for CA in the instance during a
  request (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHCS) (jmagne)
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1417307 - CC: Audit Review /Searches (edewata)
- Bugzilla Bug #1419737 - CC: CMC: id-cmc-popLinkWitnessV2 feature
  implementation (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-3" date="1493640000">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1303683 - dogtag should support GSSAPI based auth in
  conjuction with FreeIPA (ftweedal)
- Bugzilla Bug #1385208 - RHCS 9.1 RC5 CA in the certificate profiles the
  startTime parameter is not working as expected. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
- Bugzilla Bug #1426754 - PKCS12: upgrade to at least AES and SHA2 (ftweedal)
- Bugzilla Bug #1445088 - profile modification cannot remove existing config
  parameters (ftweedal)
- Bugzilla Bug #1445535 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHEL) (alee)
- Bugzilla Bug #1446874 - Missing ClientIP and ServerIP in audit log when
  pki CLI terminates SSL connection (edewata)
- Bugzilla Bug #1446875 - Session timeout for PKI console (RHEL) (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1404480 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHCS) (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
</package>
<package pkgid="20217c46d5449af25e0d640239dc2e69b89cbfcf31faaf73fe912cfb4befbf62" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="10.el7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-1" date="1490616000">- Require "nss &gt;= 3.28.3" as a build and runtime requirement
- Require "jss &gt;= 4.4.0-4" as a build and runtime requirement
- Require "tomcatjss &gt;= 7.2.1-3" as a build and runtime requirement
- dogtagpki Pagure Issue #2612 - Unable to clone due to pki pkcs12-cert-find
  failure (edewata)
- ############################################################################
- Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4
- Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.4.x
- ############################################################################
- RHEL 7.4:
- ############################################################################
- ############################################################################
- RHCS 9.2:
- ############################################################################
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1419734 - CC: CMC: id-cmc-identityProofV2 feature
  implementation (cfu)
- Bugzilla Bug #1419742 - CC: CMC: provide Proof of Possession for encryption
  cert requests (cfu)
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1428020 - CC: CMC feature support: provided issuance
  protection cert mechanism (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-2" date="1492430400">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1282504 - Installing pki-server in container reports
  scriptlet failed, exit status 1 (jpazdziora)
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1410650 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHEL) (jmagne)
- Bugzilla Bug #1437591 - cli authentication using expired cert throws an
  exception (edewata)
- Bugzilla Bug #1437602 - non-CA cli looks for CA in the instance during a
  request (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHCS) (jmagne)
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1417307 - CC: Audit Review /Searches (edewata)
- Bugzilla Bug #1419737 - CC: CMC: id-cmc-popLinkWitnessV2 feature
  implementation (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-3" date="1493640000">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1303683 - dogtag should support GSSAPI based auth in
  conjuction with FreeIPA (ftweedal)
- Bugzilla Bug #1385208 - RHCS 9.1 RC5 CA in the certificate profiles the
  startTime parameter is not working as expected. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
- Bugzilla Bug #1426754 - PKCS12: upgrade to at least AES and SHA2 (ftweedal)
- Bugzilla Bug #1445088 - profile modification cannot remove existing config
  parameters (ftweedal)
- Bugzilla Bug #1445535 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHEL) (alee)
- Bugzilla Bug #1446874 - Missing ClientIP and ServerIP in audit log when
  pki CLI terminates SSL connection (edewata)
- Bugzilla Bug #1446875 - Session timeout for PKI console (RHEL) (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1404480 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHCS) (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
</package>
<package pkgid="29ab4de7a8460c958e6b9c1113a95e127b12d6935fd65bfc79987bbd96125102" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="e36046033f1de1ccf45bc0f65917496ce84ecec9af43fc0be127d10545a9c55f" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="1c971fdf6943f3668573b0be1cb2b7b2fe2ee6dca3d7925b246e0f0737ac6051" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="0b0f0a9f7fa61a95c047afbf964563d5b3d4214705d422ac4354f865d3f20c22" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="9cb905fa6be90569503f929b98a7a588e77bd7f52214355d62901a939f38efa2" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="10.el7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-1" date="1490616000">- Require "nss &gt;= 3.28.3" as a build and runtime requirement
- Require "jss &gt;= 4.4.0-4" as a build and runtime requirement
- Require "tomcatjss &gt;= 7.2.1-3" as a build and runtime requirement
- dogtagpki Pagure Issue #2612 - Unable to clone due to pki pkcs12-cert-find
  failure (edewata)
- ############################################################################
- Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4
- Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.4.x
- ############################################################################
- RHEL 7.4:
- ############################################################################
- ############################################################################
- RHCS 9.2:
- ############################################################################
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1419734 - CC: CMC: id-cmc-identityProofV2 feature
  implementation (cfu)
- Bugzilla Bug #1419742 - CC: CMC: provide Proof of Possession for encryption
  cert requests (cfu)
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1428020 - CC: CMC feature support: provided issuance
  protection cert mechanism (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-2" date="1492430400">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1282504 - Installing pki-server in container reports
  scriptlet failed, exit status 1 (jpazdziora)
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1410650 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHEL) (jmagne)
- Bugzilla Bug #1437591 - cli authentication using expired cert throws an
  exception (edewata)
- Bugzilla Bug #1437602 - non-CA cli looks for CA in the instance during a
  request (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHCS) (jmagne)
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1417307 - CC: Audit Review /Searches (edewata)
- Bugzilla Bug #1419737 - CC: CMC: id-cmc-popLinkWitnessV2 feature
  implementation (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-3" date="1493640000">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1303683 - dogtag should support GSSAPI based auth in
  conjuction with FreeIPA (ftweedal)
- Bugzilla Bug #1385208 - RHCS 9.1 RC5 CA in the certificate profiles the
  startTime parameter is not working as expected. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
- Bugzilla Bug #1426754 - PKCS12: upgrade to at least AES and SHA2 (ftweedal)
- Bugzilla Bug #1445088 - profile modification cannot remove existing config
  parameters (ftweedal)
- Bugzilla Bug #1445535 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHEL) (alee)
- Bugzilla Bug #1446874 - Missing ClientIP and ServerIP in audit log when
  pki CLI terminates SSL connection (edewata)
- Bugzilla Bug #1446875 - Session timeout for PKI console (RHEL) (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1404480 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHCS) (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
</package>
<package pkgid="4d68c7655663e70be6626b95065668c02e0634323a01ac095bcd15b9de6442df" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="10.el7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-1" date="1490616000">- Require "nss &gt;= 3.28.3" as a build and runtime requirement
- Require "jss &gt;= 4.4.0-4" as a build and runtime requirement
- Require "tomcatjss &gt;= 7.2.1-3" as a build and runtime requirement
- dogtagpki Pagure Issue #2612 - Unable to clone due to pki pkcs12-cert-find
  failure (edewata)
- ############################################################################
- Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4
- Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.4.x
- ############################################################################
- RHEL 7.4:
- ############################################################################
- ############################################################################
- RHCS 9.2:
- ############################################################################
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1419734 - CC: CMC: id-cmc-identityProofV2 feature
  implementation (cfu)
- Bugzilla Bug #1419742 - CC: CMC: provide Proof of Possession for encryption
  cert requests (cfu)
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1428020 - CC: CMC feature support: provided issuance
  protection cert mechanism (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-2" date="1492430400">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1282504 - Installing pki-server in container reports
  scriptlet failed, exit status 1 (jpazdziora)
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1410650 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHEL) (jmagne)
- Bugzilla Bug #1437591 - cli authentication using expired cert throws an
  exception (edewata)
- Bugzilla Bug #1437602 - non-CA cli looks for CA in the instance during a
  request (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHCS) (jmagne)
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1417307 - CC: Audit Review /Searches (edewata)
- Bugzilla Bug #1419737 - CC: CMC: id-cmc-popLinkWitnessV2 feature
  implementation (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-3" date="1493640000">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1303683 - dogtag should support GSSAPI based auth in
  conjuction with FreeIPA (ftweedal)
- Bugzilla Bug #1385208 - RHCS 9.1 RC5 CA in the certificate profiles the
  startTime parameter is not working as expected. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
- Bugzilla Bug #1426754 - PKCS12: upgrade to at least AES and SHA2 (ftweedal)
- Bugzilla Bug #1445088 - profile modification cannot remove existing config
  parameters (ftweedal)
- Bugzilla Bug #1445535 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHEL) (alee)
- Bugzilla Bug #1446874 - Missing ClientIP and ServerIP in audit log when
  pki CLI terminates SSL connection (edewata)
- Bugzilla Bug #1446875 - Session timeout for PKI console (RHEL) (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1404480 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHCS) (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
</package>
<package pkgid="18540d50be969e72d614e263b6d812d840005f9da56c0459632c21c73aab5008" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="77c7bef0032125acfe5f6148c0a2e151e9f0f1fd17ec9cdcd11004997c795301" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="dbc0690bac73b6cbc9841e4e4448fedc43dd5fd5d78e3d4b234750cda4f297e1" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="f77367e5a910f98d2b23d9fa0403483c1242eefd66bc09a2c6fc09174fd2a362" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="cedef0c4b5d878f8740392e98885414dbc39674d9e24ce2be6547f70a70435fe" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="10.el7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-1" date="1490616000">- Require "nss &gt;= 3.28.3" as a build and runtime requirement
- Require "jss &gt;= 4.4.0-4" as a build and runtime requirement
- Require "tomcatjss &gt;= 7.2.1-3" as a build and runtime requirement
- dogtagpki Pagure Issue #2612 - Unable to clone due to pki pkcs12-cert-find
  failure (edewata)
- ############################################################################
- Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4
- Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.4.x
- ############################################################################
- RHEL 7.4:
- ############################################################################
- ############################################################################
- RHCS 9.2:
- ############################################################################
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1419734 - CC: CMC: id-cmc-identityProofV2 feature
  implementation (cfu)
- Bugzilla Bug #1419742 - CC: CMC: provide Proof of Possession for encryption
  cert requests (cfu)
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1428020 - CC: CMC feature support: provided issuance
  protection cert mechanism (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-2" date="1492430400">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1282504 - Installing pki-server in container reports
  scriptlet failed, exit status 1 (jpazdziora)
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1410650 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHEL) (jmagne)
- Bugzilla Bug #1437591 - cli authentication using expired cert throws an
  exception (edewata)
- Bugzilla Bug #1437602 - non-CA cli looks for CA in the instance during a
  request (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHCS) (jmagne)
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1417307 - CC: Audit Review /Searches (edewata)
- Bugzilla Bug #1419737 - CC: CMC: id-cmc-popLinkWitnessV2 feature
  implementation (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-3" date="1493640000">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1303683 - dogtag should support GSSAPI based auth in
  conjuction with FreeIPA (ftweedal)
- Bugzilla Bug #1385208 - RHCS 9.1 RC5 CA in the certificate profiles the
  startTime parameter is not working as expected. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
- Bugzilla Bug #1426754 - PKCS12: upgrade to at least AES and SHA2 (ftweedal)
- Bugzilla Bug #1445088 - profile modification cannot remove existing config
  parameters (ftweedal)
- Bugzilla Bug #1445535 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHEL) (alee)
- Bugzilla Bug #1446874 - Missing ClientIP and ServerIP in audit log when
  pki CLI terminates SSL connection (edewata)
- Bugzilla Bug #1446875 - Session timeout for PKI console (RHEL) (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1404480 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHCS) (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
</package>
<package pkgid="281f0232036abd99fa44c670e222f4a65b31bcfba36378302ec860efc8007079" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="10.el7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-1" date="1490616000">- Require "nss &gt;= 3.28.3" as a build and runtime requirement
- Require "jss &gt;= 4.4.0-4" as a build and runtime requirement
- Require "tomcatjss &gt;= 7.2.1-3" as a build and runtime requirement
- dogtagpki Pagure Issue #2612 - Unable to clone due to pki pkcs12-cert-find
  failure (edewata)
- ############################################################################
- Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4
- Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.4.x
- ############################################################################
- RHEL 7.4:
- ############################################################################
- ############################################################################
- RHCS 9.2:
- ############################################################################
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1419734 - CC: CMC: id-cmc-identityProofV2 feature
  implementation (cfu)
- Bugzilla Bug #1419742 - CC: CMC: provide Proof of Possession for encryption
  cert requests (cfu)
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1428020 - CC: CMC feature support: provided issuance
  protection cert mechanism (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-2" date="1492430400">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1282504 - Installing pki-server in container reports
  scriptlet failed, exit status 1 (jpazdziora)
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1410650 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHEL) (jmagne)
- Bugzilla Bug #1437591 - cli authentication using expired cert throws an
  exception (edewata)
- Bugzilla Bug #1437602 - non-CA cli looks for CA in the instance during a
  request (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHCS) (jmagne)
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1417307 - CC: Audit Review /Searches (edewata)
- Bugzilla Bug #1419737 - CC: CMC: id-cmc-popLinkWitnessV2 feature
  implementation (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-3" date="1493640000">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1303683 - dogtag should support GSSAPI based auth in
  conjuction with FreeIPA (ftweedal)
- Bugzilla Bug #1385208 - RHCS 9.1 RC5 CA in the certificate profiles the
  startTime parameter is not working as expected. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
- Bugzilla Bug #1426754 - PKCS12: upgrade to at least AES and SHA2 (ftweedal)
- Bugzilla Bug #1445088 - profile modification cannot remove existing config
  parameters (ftweedal)
- Bugzilla Bug #1445535 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHEL) (alee)
- Bugzilla Bug #1446874 - Missing ClientIP and ServerIP in audit log when
  pki CLI terminates SSL connection (edewata)
- Bugzilla Bug #1446875 - Session timeout for PKI console (RHEL) (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1404480 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHCS) (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
</package>
<package pkgid="6e0878dbffbcfe2da0b2898af4ea6f1168bd050de3ca2cee2218af66868587e9" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="69674071e91982feb88ff8a46069bac6b50e9b6b563562b2e6143e202f7150e0" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="a719e9ab11830d4f05997493dbf1f194cfe8db08bf399fa493b0f55b4578acfc" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="223a78a14e95a8e684fa2fceb72c2db2bb3fa36967b0fc8108226f316b598881" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="aca26537e8d6e6dfd475dd5d613374f7362cc2661ed2ec14c1a930cadf3ead56" name="pki-core" arch="src">
  <version epoch="0" ver="10.4.1" rel="10.el7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-1" date="1490616000">- Require "nss &gt;= 3.28.3" as a build and runtime requirement
- Require "jss &gt;= 4.4.0-4" as a build and runtime requirement
- Require "tomcatjss &gt;= 7.2.1-3" as a build and runtime requirement
- dogtagpki Pagure Issue #2612 - Unable to clone due to pki pkcs12-cert-find
  failure (edewata)
- ############################################################################
- Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4
- Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.4.x
- ############################################################################
- RHEL 7.4:
- ############################################################################
- ############################################################################
- RHCS 9.2:
- ############################################################################
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1419734 - CC: CMC: id-cmc-identityProofV2 feature
  implementation (cfu)
- Bugzilla Bug #1419742 - CC: CMC: provide Proof of Possession for encryption
  cert requests (cfu)
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1428020 - CC: CMC feature support: provided issuance
  protection cert mechanism (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-2" date="1492430400">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1282504 - Installing pki-server in container reports
  scriptlet failed, exit status 1 (jpazdziora)
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1410650 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHEL) (jmagne)
- Bugzilla Bug #1437591 - cli authentication using expired cert throws an
  exception (edewata)
- Bugzilla Bug #1437602 - non-CA cli looks for CA in the instance during a
  request (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHCS) (jmagne)
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1417307 - CC: Audit Review /Searches (edewata)
- Bugzilla Bug #1419737 - CC: CMC: id-cmc-popLinkWitnessV2 feature
  implementation (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-3" date="1493640000">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1303683 - dogtag should support GSSAPI based auth in
  conjuction with FreeIPA (ftweedal)
- Bugzilla Bug #1385208 - RHCS 9.1 RC5 CA in the certificate profiles the
  startTime parameter is not working as expected. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
- Bugzilla Bug #1426754 - PKCS12: upgrade to at least AES and SHA2 (ftweedal)
- Bugzilla Bug #1445088 - profile modification cannot remove existing config
  parameters (ftweedal)
- Bugzilla Bug #1445535 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHEL) (alee)
- Bugzilla Bug #1446874 - Missing ClientIP and ServerIP in audit log when
  pki CLI terminates SSL connection (edewata)
- Bugzilla Bug #1446875 - Session timeout for PKI console (RHEL) (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1404480 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHCS) (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
</package>
<package pkgid="fa1e4f5b16a56f274c7705b2e1dd30bf9243ebac0c698b5936c02066c9fb0811" name="pki-core" arch="src">
  <version epoch="0" ver="10.4.1" rel="10.el7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-1" date="1490616000">- Require "nss &gt;= 3.28.3" as a build and runtime requirement
- Require "jss &gt;= 4.4.0-4" as a build and runtime requirement
- Require "tomcatjss &gt;= 7.2.1-3" as a build and runtime requirement
- dogtagpki Pagure Issue #2612 - Unable to clone due to pki pkcs12-cert-find
  failure (edewata)
- ############################################################################
- Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4
- Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.4.x
- ############################################################################
- RHEL 7.4:
- ############################################################################
- ############################################################################
- RHCS 9.2:
- ############################################################################
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1419734 - CC: CMC: id-cmc-identityProofV2 feature
  implementation (cfu)
- Bugzilla Bug #1419742 - CC: CMC: provide Proof of Possession for encryption
  cert requests (cfu)
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1428020 - CC: CMC feature support: provided issuance
  protection cert mechanism (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-2" date="1492430400">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1282504 - Installing pki-server in container reports
  scriptlet failed, exit status 1 (jpazdziora)
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1410650 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHEL) (jmagne)
- Bugzilla Bug #1437591 - cli authentication using expired cert throws an
  exception (edewata)
- Bugzilla Bug #1437602 - non-CA cli looks for CA in the instance during a
  request (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHCS) (jmagne)
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1417307 - CC: Audit Review /Searches (edewata)
- Bugzilla Bug #1419737 - CC: CMC: id-cmc-popLinkWitnessV2 feature
  implementation (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-3" date="1493640000">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1303683 - dogtag should support GSSAPI based auth in
  conjuction with FreeIPA (ftweedal)
- Bugzilla Bug #1385208 - RHCS 9.1 RC5 CA in the certificate profiles the
  startTime parameter is not working as expected. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
- Bugzilla Bug #1426754 - PKCS12: upgrade to at least AES and SHA2 (ftweedal)
- Bugzilla Bug #1445088 - profile modification cannot remove existing config
  parameters (ftweedal)
- Bugzilla Bug #1445535 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHEL) (alee)
- Bugzilla Bug #1446874 - Missing ClientIP and ServerIP in audit log when
  pki CLI terminates SSL connection (edewata)
- Bugzilla Bug #1446875 - Session timeout for PKI console (RHEL) (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1404480 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHCS) (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
</package>
<package pkgid="4044423eb907cd5366933e9a370bc0e57e846234b1a8dc06be782c9f917ff25b" name="pki-core" arch="src">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="e843812c8af2ae67199df33076a0ed0fd8257d2d5f25fc6b9cb8749197f28747" name="pki-core" arch="src">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="8c4717201c6e915fb1e22fd63368f5d642670f23a6d9bf874a7c3dc10af17ece" name="pki-core" arch="src">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="1620c4ac120d0770169ef2a9b946dd0e1c3e236836571cbd187eb7aec5b4d5fa" name="pki-core" arch="src">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="c5ae4144d50cb95ca89cbb23e1c8740e6d1ab51b2c0057977f1f9bb1b5eb6a3a" name="pki-core-debuginfo" arch="i686">
  <version epoch="0" ver="10.4.1" rel="10.el7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-1" date="1490616000">- Require "nss &gt;= 3.28.3" as a build and runtime requirement
- Require "jss &gt;= 4.4.0-4" as a build and runtime requirement
- Require "tomcatjss &gt;= 7.2.1-3" as a build and runtime requirement
- dogtagpki Pagure Issue #2612 - Unable to clone due to pki pkcs12-cert-find
  failure (edewata)
- ############################################################################
- Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4
- Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.4.x
- ############################################################################
- RHEL 7.4:
- ############################################################################
- ############################################################################
- RHCS 9.2:
- ############################################################################
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1419734 - CC: CMC: id-cmc-identityProofV2 feature
  implementation (cfu)
- Bugzilla Bug #1419742 - CC: CMC: provide Proof of Possession for encryption
  cert requests (cfu)
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1428020 - CC: CMC feature support: provided issuance
  protection cert mechanism (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-2" date="1492430400">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1282504 - Installing pki-server in container reports
  scriptlet failed, exit status 1 (jpazdziora)
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1410650 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHEL) (jmagne)
- Bugzilla Bug #1437591 - cli authentication using expired cert throws an
  exception (edewata)
- Bugzilla Bug #1437602 - non-CA cli looks for CA in the instance during a
  request (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHCS) (jmagne)
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1417307 - CC: Audit Review /Searches (edewata)
- Bugzilla Bug #1419737 - CC: CMC: id-cmc-popLinkWitnessV2 feature
  implementation (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-3" date="1493640000">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1303683 - dogtag should support GSSAPI based auth in
  conjuction with FreeIPA (ftweedal)
- Bugzilla Bug #1385208 - RHCS 9.1 RC5 CA in the certificate profiles the
  startTime parameter is not working as expected. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
- Bugzilla Bug #1426754 - PKCS12: upgrade to at least AES and SHA2 (ftweedal)
- Bugzilla Bug #1445088 - profile modification cannot remove existing config
  parameters (ftweedal)
- Bugzilla Bug #1445535 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHEL) (alee)
- Bugzilla Bug #1446874 - Missing ClientIP and ServerIP in audit log when
  pki CLI terminates SSL connection (edewata)
- Bugzilla Bug #1446875 - Session timeout for PKI console (RHEL) (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1404480 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHCS) (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
</package>
<package pkgid="0bb91532df8d9d7528c3a72611f2cb0bb92bd6fb6dda55070e406747091c6948" name="pki-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.4.1" rel="10.el7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-1" date="1490616000">- Require "nss &gt;= 3.28.3" as a build and runtime requirement
- Require "jss &gt;= 4.4.0-4" as a build and runtime requirement
- Require "tomcatjss &gt;= 7.2.1-3" as a build and runtime requirement
- dogtagpki Pagure Issue #2612 - Unable to clone due to pki pkcs12-cert-find
  failure (edewata)
- ############################################################################
- Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4
- Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.4.x
- ############################################################################
- RHEL 7.4:
- ############################################################################
- ############################################################################
- RHCS 9.2:
- ############################################################################
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1419734 - CC: CMC: id-cmc-identityProofV2 feature
  implementation (cfu)
- Bugzilla Bug #1419742 - CC: CMC: provide Proof of Possession for encryption
  cert requests (cfu)
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1428020 - CC: CMC feature support: provided issuance
  protection cert mechanism (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-2" date="1492430400">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1282504 - Installing pki-server in container reports
  scriptlet failed, exit status 1 (jpazdziora)
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1410650 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHEL) (jmagne)
- Bugzilla Bug #1437591 - cli authentication using expired cert throws an
  exception (edewata)
- Bugzilla Bug #1437602 - non-CA cli looks for CA in the instance during a
  request (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHCS) (jmagne)
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1417307 - CC: Audit Review /Searches (edewata)
- Bugzilla Bug #1419737 - CC: CMC: id-cmc-popLinkWitnessV2 feature
  implementation (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-3" date="1493640000">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1303683 - dogtag should support GSSAPI based auth in
  conjuction with FreeIPA (ftweedal)
- Bugzilla Bug #1385208 - RHCS 9.1 RC5 CA in the certificate profiles the
  startTime parameter is not working as expected. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
- Bugzilla Bug #1426754 - PKCS12: upgrade to at least AES and SHA2 (ftweedal)
- Bugzilla Bug #1445088 - profile modification cannot remove existing config
  parameters (ftweedal)
- Bugzilla Bug #1445535 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHEL) (alee)
- Bugzilla Bug #1446874 - Missing ClientIP and ServerIP in audit log when
  pki CLI terminates SSL connection (edewata)
- Bugzilla Bug #1446875 - Session timeout for PKI console (RHEL) (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1404480 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHCS) (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
</package>
<package pkgid="d0248ae18ff7453fe7457ded4f9bf3348dcefe4272110e5d59356079bceb1c51" name="pki-core-debuginfo" arch="i686">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="e441a4360d4cffb74c514eefd098473fe565ad73cba5e4e9d6f983d681a23772" name="pki-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="5d6ec16110031ec633108edff948df74920ce8643a0298e00ec12fe1fabbd676" name="pki-core-debuginfo" arch="i686">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="b7972af4e5657351c7aaaff89bb0bb855cbfd9c534f147363714ed7b8e0e7c7c" name="pki-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="3e99162121ac5caffe90bfc4c02e49892d38d66e26d682d27b32f64f8f610ce7" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="10.el7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-1" date="1490616000">- Require "nss &gt;= 3.28.3" as a build and runtime requirement
- Require "jss &gt;= 4.4.0-4" as a build and runtime requirement
- Require "tomcatjss &gt;= 7.2.1-3" as a build and runtime requirement
- dogtagpki Pagure Issue #2612 - Unable to clone due to pki pkcs12-cert-find
  failure (edewata)
- ############################################################################
- Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4
- Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.4.x
- ############################################################################
- RHEL 7.4:
- ############################################################################
- ############################################################################
- RHCS 9.2:
- ############################################################################
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1419734 - CC: CMC: id-cmc-identityProofV2 feature
  implementation (cfu)
- Bugzilla Bug #1419742 - CC: CMC: provide Proof of Possession for encryption
  cert requests (cfu)
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1428020 - CC: CMC feature support: provided issuance
  protection cert mechanism (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-2" date="1492430400">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1282504 - Installing pki-server in container reports
  scriptlet failed, exit status 1 (jpazdziora)
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1410650 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHEL) (jmagne)
- Bugzilla Bug #1437591 - cli authentication using expired cert throws an
  exception (edewata)
- Bugzilla Bug #1437602 - non-CA cli looks for CA in the instance during a
  request (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHCS) (jmagne)
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1417307 - CC: Audit Review /Searches (edewata)
- Bugzilla Bug #1419737 - CC: CMC: id-cmc-popLinkWitnessV2 feature
  implementation (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-3" date="1493640000">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1303683 - dogtag should support GSSAPI based auth in
  conjuction with FreeIPA (ftweedal)
- Bugzilla Bug #1385208 - RHCS 9.1 RC5 CA in the certificate profiles the
  startTime parameter is not working as expected. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
- Bugzilla Bug #1426754 - PKCS12: upgrade to at least AES and SHA2 (ftweedal)
- Bugzilla Bug #1445088 - profile modification cannot remove existing config
  parameters (ftweedal)
- Bugzilla Bug #1445535 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHEL) (alee)
- Bugzilla Bug #1446874 - Missing ClientIP and ServerIP in audit log when
  pki CLI terminates SSL connection (edewata)
- Bugzilla Bug #1446875 - Session timeout for PKI console (RHEL) (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1404480 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHCS) (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
</package>
<package pkgid="8fdda2e680bbc0505f7468dcac95fc1cbe8f5d027faad0acc6f993eee76abf29" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="10.el7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-1" date="1490616000">- Require "nss &gt;= 3.28.3" as a build and runtime requirement
- Require "jss &gt;= 4.4.0-4" as a build and runtime requirement
- Require "tomcatjss &gt;= 7.2.1-3" as a build and runtime requirement
- dogtagpki Pagure Issue #2612 - Unable to clone due to pki pkcs12-cert-find
  failure (edewata)
- ############################################################################
- Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4
- Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.4.x
- ############################################################################
- RHEL 7.4:
- ############################################################################
- ############################################################################
- RHCS 9.2:
- ############################################################################
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1419734 - CC: CMC: id-cmc-identityProofV2 feature
  implementation (cfu)
- Bugzilla Bug #1419742 - CC: CMC: provide Proof of Possession for encryption
  cert requests (cfu)
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1428020 - CC: CMC feature support: provided issuance
  protection cert mechanism (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-2" date="1492430400">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1282504 - Installing pki-server in container reports
  scriptlet failed, exit status 1 (jpazdziora)
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1410650 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHEL) (jmagne)
- Bugzilla Bug #1437591 - cli authentication using expired cert throws an
  exception (edewata)
- Bugzilla Bug #1437602 - non-CA cli looks for CA in the instance during a
  request (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHCS) (jmagne)
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1417307 - CC: Audit Review /Searches (edewata)
- Bugzilla Bug #1419737 - CC: CMC: id-cmc-popLinkWitnessV2 feature
  implementation (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-3" date="1493640000">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1303683 - dogtag should support GSSAPI based auth in
  conjuction with FreeIPA (ftweedal)
- Bugzilla Bug #1385208 - RHCS 9.1 RC5 CA in the certificate profiles the
  startTime parameter is not working as expected. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
- Bugzilla Bug #1426754 - PKCS12: upgrade to at least AES and SHA2 (ftweedal)
- Bugzilla Bug #1445088 - profile modification cannot remove existing config
  parameters (ftweedal)
- Bugzilla Bug #1445535 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHEL) (alee)
- Bugzilla Bug #1446874 - Missing ClientIP and ServerIP in audit log when
  pki CLI terminates SSL connection (edewata)
- Bugzilla Bug #1446875 - Session timeout for PKI console (RHEL) (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1404480 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHCS) (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
</package>
<package pkgid="42de0b6841faa468ffe3e562e68d35d4de141b867a555ced9402cc9e82706363" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="eb4162541caa4a9eb8791e87e0ac32bddaad3f9c57e4f962bdd178cfc0e84611" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="eec35ee6336da68f30ad9286f35547f140a07932cc3d09e03d743141e61ec31b" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="b4307a0af370f474cebab81dfbb61b0e7b6e40580efd6445813bf16ea4ccbaca" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="19a111257d3ce221676a43e86a10d41a41c28dafff105ef93e873102ee2e9d51" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="10.el7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-1" date="1490616000">- Require "nss &gt;= 3.28.3" as a build and runtime requirement
- Require "jss &gt;= 4.4.0-4" as a build and runtime requirement
- Require "tomcatjss &gt;= 7.2.1-3" as a build and runtime requirement
- dogtagpki Pagure Issue #2612 - Unable to clone due to pki pkcs12-cert-find
  failure (edewata)
- ############################################################################
- Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4
- Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.4.x
- ############################################################################
- RHEL 7.4:
- ############################################################################
- ############################################################################
- RHCS 9.2:
- ############################################################################
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1419734 - CC: CMC: id-cmc-identityProofV2 feature
  implementation (cfu)
- Bugzilla Bug #1419742 - CC: CMC: provide Proof of Possession for encryption
  cert requests (cfu)
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1428020 - CC: CMC feature support: provided issuance
  protection cert mechanism (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-2" date="1492430400">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1282504 - Installing pki-server in container reports
  scriptlet failed, exit status 1 (jpazdziora)
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1410650 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHEL) (jmagne)
- Bugzilla Bug #1437591 - cli authentication using expired cert throws an
  exception (edewata)
- Bugzilla Bug #1437602 - non-CA cli looks for CA in the instance during a
  request (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHCS) (jmagne)
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1417307 - CC: Audit Review /Searches (edewata)
- Bugzilla Bug #1419737 - CC: CMC: id-cmc-popLinkWitnessV2 feature
  implementation (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-3" date="1493640000">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1303683 - dogtag should support GSSAPI based auth in
  conjuction with FreeIPA (ftweedal)
- Bugzilla Bug #1385208 - RHCS 9.1 RC5 CA in the certificate profiles the
  startTime parameter is not working as expected. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
- Bugzilla Bug #1426754 - PKCS12: upgrade to at least AES and SHA2 (ftweedal)
- Bugzilla Bug #1445088 - profile modification cannot remove existing config
  parameters (ftweedal)
- Bugzilla Bug #1445535 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHEL) (alee)
- Bugzilla Bug #1446874 - Missing ClientIP and ServerIP in audit log when
  pki CLI terminates SSL connection (edewata)
- Bugzilla Bug #1446875 - Session timeout for PKI console (RHEL) (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1404480 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHCS) (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
</package>
<package pkgid="0dd5a90ed45000ff054a18e520d70d18749d59978ae7647a861c60b0d4dd1e24" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="10.el7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-1" date="1490616000">- Require "nss &gt;= 3.28.3" as a build and runtime requirement
- Require "jss &gt;= 4.4.0-4" as a build and runtime requirement
- Require "tomcatjss &gt;= 7.2.1-3" as a build and runtime requirement
- dogtagpki Pagure Issue #2612 - Unable to clone due to pki pkcs12-cert-find
  failure (edewata)
- ############################################################################
- Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4
- Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.4.x
- ############################################################################
- RHEL 7.4:
- ############################################################################
- ############################################################################
- RHCS 9.2:
- ############################################################################
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1419734 - CC: CMC: id-cmc-identityProofV2 feature
  implementation (cfu)
- Bugzilla Bug #1419742 - CC: CMC: provide Proof of Possession for encryption
  cert requests (cfu)
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1428020 - CC: CMC feature support: provided issuance
  protection cert mechanism (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-2" date="1492430400">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1282504 - Installing pki-server in container reports
  scriptlet failed, exit status 1 (jpazdziora)
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1410650 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHEL) (jmagne)
- Bugzilla Bug #1437591 - cli authentication using expired cert throws an
  exception (edewata)
- Bugzilla Bug #1437602 - non-CA cli looks for CA in the instance during a
  request (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHCS) (jmagne)
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1417307 - CC: Audit Review /Searches (edewata)
- Bugzilla Bug #1419737 - CC: CMC: id-cmc-popLinkWitnessV2 feature
  implementation (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-3" date="1493640000">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1303683 - dogtag should support GSSAPI based auth in
  conjuction with FreeIPA (ftweedal)
- Bugzilla Bug #1385208 - RHCS 9.1 RC5 CA in the certificate profiles the
  startTime parameter is not working as expected. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
- Bugzilla Bug #1426754 - PKCS12: upgrade to at least AES and SHA2 (ftweedal)
- Bugzilla Bug #1445088 - profile modification cannot remove existing config
  parameters (ftweedal)
- Bugzilla Bug #1445535 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHEL) (alee)
- Bugzilla Bug #1446874 - Missing ClientIP and ServerIP in audit log when
  pki CLI terminates SSL connection (edewata)
- Bugzilla Bug #1446875 - Session timeout for PKI console (RHEL) (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1404480 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHCS) (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
</package>
<package pkgid="b5807bd17d529a787e9926a6864b8c184788c5afa94b4756e06599d88356763e" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="52b06f3fa407d7db247accd5bb2248931daff9c9540c466a975a3815b748720f" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="ec5c12b614d05b11ca31ccbd79985f7610e67a02d5767bf28d0d8c762817a164" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="923c1207881a19f4be323c8d718a1273e2319d4135b1d802982b34257dc7bbd8" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="c334849c4b398d059be534d1b4c22a8154ff5497c5e45e49d025fbd879ed8275" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="10.el7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-1" date="1490616000">- Require "nss &gt;= 3.28.3" as a build and runtime requirement
- Require "jss &gt;= 4.4.0-4" as a build and runtime requirement
- Require "tomcatjss &gt;= 7.2.1-3" as a build and runtime requirement
- dogtagpki Pagure Issue #2612 - Unable to clone due to pki pkcs12-cert-find
  failure (edewata)
- ############################################################################
- Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4
- Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.4.x
- ############################################################################
- RHEL 7.4:
- ############################################################################
- ############################################################################
- RHCS 9.2:
- ############################################################################
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1419734 - CC: CMC: id-cmc-identityProofV2 feature
  implementation (cfu)
- Bugzilla Bug #1419742 - CC: CMC: provide Proof of Possession for encryption
  cert requests (cfu)
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1428020 - CC: CMC feature support: provided issuance
  protection cert mechanism (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-2" date="1492430400">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1282504 - Installing pki-server in container reports
  scriptlet failed, exit status 1 (jpazdziora)
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1410650 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHEL) (jmagne)
- Bugzilla Bug #1437591 - cli authentication using expired cert throws an
  exception (edewata)
- Bugzilla Bug #1437602 - non-CA cli looks for CA in the instance during a
  request (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHCS) (jmagne)
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1417307 - CC: Audit Review /Searches (edewata)
- Bugzilla Bug #1419737 - CC: CMC: id-cmc-popLinkWitnessV2 feature
  implementation (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-3" date="1493640000">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1303683 - dogtag should support GSSAPI based auth in
  conjuction with FreeIPA (ftweedal)
- Bugzilla Bug #1385208 - RHCS 9.1 RC5 CA in the certificate profiles the
  startTime parameter is not working as expected. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
- Bugzilla Bug #1426754 - PKCS12: upgrade to at least AES and SHA2 (ftweedal)
- Bugzilla Bug #1445088 - profile modification cannot remove existing config
  parameters (ftweedal)
- Bugzilla Bug #1445535 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHEL) (alee)
- Bugzilla Bug #1446874 - Missing ClientIP and ServerIP in audit log when
  pki CLI terminates SSL connection (edewata)
- Bugzilla Bug #1446875 - Session timeout for PKI console (RHEL) (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1404480 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHCS) (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
</package>
<package pkgid="e1d9c3400ba8d3aa0af1a082d1a5264289b45b3acd61c6958d0080c55b51af98" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="10.el7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-1" date="1490616000">- Require "nss &gt;= 3.28.3" as a build and runtime requirement
- Require "jss &gt;= 4.4.0-4" as a build and runtime requirement
- Require "tomcatjss &gt;= 7.2.1-3" as a build and runtime requirement
- dogtagpki Pagure Issue #2612 - Unable to clone due to pki pkcs12-cert-find
  failure (edewata)
- ############################################################################
- Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4
- Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.4.x
- ############################################################################
- RHEL 7.4:
- ############################################################################
- ############################################################################
- RHCS 9.2:
- ############################################################################
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1419734 - CC: CMC: id-cmc-identityProofV2 feature
  implementation (cfu)
- Bugzilla Bug #1419742 - CC: CMC: provide Proof of Possession for encryption
  cert requests (cfu)
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1428020 - CC: CMC feature support: provided issuance
  protection cert mechanism (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-2" date="1492430400">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1282504 - Installing pki-server in container reports
  scriptlet failed, exit status 1 (jpazdziora)
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1410650 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHEL) (jmagne)
- Bugzilla Bug #1437591 - cli authentication using expired cert throws an
  exception (edewata)
- Bugzilla Bug #1437602 - non-CA cli looks for CA in the instance during a
  request (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHCS) (jmagne)
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1417307 - CC: Audit Review /Searches (edewata)
- Bugzilla Bug #1419737 - CC: CMC: id-cmc-popLinkWitnessV2 feature
  implementation (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-3" date="1493640000">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1303683 - dogtag should support GSSAPI based auth in
  conjuction with FreeIPA (ftweedal)
- Bugzilla Bug #1385208 - RHCS 9.1 RC5 CA in the certificate profiles the
  startTime parameter is not working as expected. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
- Bugzilla Bug #1426754 - PKCS12: upgrade to at least AES and SHA2 (ftweedal)
- Bugzilla Bug #1445088 - profile modification cannot remove existing config
  parameters (ftweedal)
- Bugzilla Bug #1445535 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHEL) (alee)
- Bugzilla Bug #1446874 - Missing ClientIP and ServerIP in audit log when
  pki CLI terminates SSL connection (edewata)
- Bugzilla Bug #1446875 - Session timeout for PKI console (RHEL) (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1404480 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHCS) (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
</package>
<package pkgid="0fdb71a3485ab28977f0a4c72ed695e02ac23f7da290421f76fb6359c6873f4b" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="eae17f13b16c0820b40f7d8039d4ea5e4e576f843e8619aae8c655c259bff84f" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="a231a750e76d93785b43d1d684bc97a840d16b8891f7ab19dd868fab0da79061" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="ee13ed10815b10d229fdb4f97c629be15c46e6755fb6a68fbddb47bd70f86b35" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="9fcf35163181eac9d036e77d0a5b6c3e4a83334f7bf64a8c9da8f5ccb55c5257" name="pki-symkey" arch="i686">
  <version epoch="0" ver="10.4.1" rel="10.el7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-1" date="1490616000">- Require "nss &gt;= 3.28.3" as a build and runtime requirement
- Require "jss &gt;= 4.4.0-4" as a build and runtime requirement
- Require "tomcatjss &gt;= 7.2.1-3" as a build and runtime requirement
- dogtagpki Pagure Issue #2612 - Unable to clone due to pki pkcs12-cert-find
  failure (edewata)
- ############################################################################
- Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4
- Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.4.x
- ############################################################################
- RHEL 7.4:
- ############################################################################
- ############################################################################
- RHCS 9.2:
- ############################################################################
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1419734 - CC: CMC: id-cmc-identityProofV2 feature
  implementation (cfu)
- Bugzilla Bug #1419742 - CC: CMC: provide Proof of Possession for encryption
  cert requests (cfu)
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1428020 - CC: CMC feature support: provided issuance
  protection cert mechanism (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-2" date="1492430400">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1282504 - Installing pki-server in container reports
  scriptlet failed, exit status 1 (jpazdziora)
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1410650 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHEL) (jmagne)
- Bugzilla Bug #1437591 - cli authentication using expired cert throws an
  exception (edewata)
- Bugzilla Bug #1437602 - non-CA cli looks for CA in the instance during a
  request (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHCS) (jmagne)
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1417307 - CC: Audit Review /Searches (edewata)
- Bugzilla Bug #1419737 - CC: CMC: id-cmc-popLinkWitnessV2 feature
  implementation (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-3" date="1493640000">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1303683 - dogtag should support GSSAPI based auth in
  conjuction with FreeIPA (ftweedal)
- Bugzilla Bug #1385208 - RHCS 9.1 RC5 CA in the certificate profiles the
  startTime parameter is not working as expected. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
- Bugzilla Bug #1426754 - PKCS12: upgrade to at least AES and SHA2 (ftweedal)
- Bugzilla Bug #1445088 - profile modification cannot remove existing config
  parameters (ftweedal)
- Bugzilla Bug #1445535 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHEL) (alee)
- Bugzilla Bug #1446874 - Missing ClientIP and ServerIP in audit log when
  pki CLI terminates SSL connection (edewata)
- Bugzilla Bug #1446875 - Session timeout for PKI console (RHEL) (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1404480 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHCS) (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
</package>
<package pkgid="1c0ec97e30158f0288333d36814f432bb4f932f737e22716c438a5b3e6f9322a" name="pki-symkey" arch="x86_64">
  <version epoch="0" ver="10.4.1" rel="10.el7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-1" date="1490616000">- Require "nss &gt;= 3.28.3" as a build and runtime requirement
- Require "jss &gt;= 4.4.0-4" as a build and runtime requirement
- Require "tomcatjss &gt;= 7.2.1-3" as a build and runtime requirement
- dogtagpki Pagure Issue #2612 - Unable to clone due to pki pkcs12-cert-find
  failure (edewata)
- ############################################################################
- Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4
- Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.4.x
- ############################################################################
- RHEL 7.4:
- ############################################################################
- ############################################################################
- RHCS 9.2:
- ############################################################################
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1419734 - CC: CMC: id-cmc-identityProofV2 feature
  implementation (cfu)
- Bugzilla Bug #1419742 - CC: CMC: provide Proof of Possession for encryption
  cert requests (cfu)
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1428020 - CC: CMC feature support: provided issuance
  protection cert mechanism (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-2" date="1492430400">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1282504 - Installing pki-server in container reports
  scriptlet failed, exit status 1 (jpazdziora)
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1410650 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHEL) (jmagne)
- Bugzilla Bug #1437591 - cli authentication using expired cert throws an
  exception (edewata)
- Bugzilla Bug #1437602 - non-CA cli looks for CA in the instance during a
  request (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHCS) (jmagne)
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1417307 - CC: Audit Review /Searches (edewata)
- Bugzilla Bug #1419737 - CC: CMC: id-cmc-popLinkWitnessV2 feature
  implementation (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-3" date="1493640000">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1303683 - dogtag should support GSSAPI based auth in
  conjuction with FreeIPA (ftweedal)
- Bugzilla Bug #1385208 - RHCS 9.1 RC5 CA in the certificate profiles the
  startTime parameter is not working as expected. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
- Bugzilla Bug #1426754 - PKCS12: upgrade to at least AES and SHA2 (ftweedal)
- Bugzilla Bug #1445088 - profile modification cannot remove existing config
  parameters (ftweedal)
- Bugzilla Bug #1445535 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHEL) (alee)
- Bugzilla Bug #1446874 - Missing ClientIP and ServerIP in audit log when
  pki CLI terminates SSL connection (edewata)
- Bugzilla Bug #1446875 - Session timeout for PKI console (RHEL) (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1404480 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHCS) (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
</package>
<package pkgid="0cb3bc52321d771dee083ffb5ac02f6247db6b3eae0857e93052f1f2917eb9a5" name="pki-symkey" arch="i686">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="a0b613293a6ab068e3c49dbd053003b3b0be8ac1c4b62264f29b6201f05105a8" name="pki-symkey" arch="x86_64">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="d137739fdce5745ef93758253f445783e4841268fc5996d2f21dbb0b2d8795b2" name="pki-symkey" arch="i686">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="9c8878204a7d41b70c7a8b42753f9a85bbf65ceb0ada284fe56ced29ea3c22ef" name="pki-symkey" arch="x86_64">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="e5e37d84a9f7c0fc1af219cc23ca8eac92d07a2f33ce8feee87f83fe8b16ba81" name="pki-tools" arch="i686">
  <version epoch="0" ver="10.4.1" rel="10.el7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-1" date="1490616000">- Require "nss &gt;= 3.28.3" as a build and runtime requirement
- Require "jss &gt;= 4.4.0-4" as a build and runtime requirement
- Require "tomcatjss &gt;= 7.2.1-3" as a build and runtime requirement
- dogtagpki Pagure Issue #2612 - Unable to clone due to pki pkcs12-cert-find
  failure (edewata)
- ############################################################################
- Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4
- Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.4.x
- ############################################################################
- RHEL 7.4:
- ############################################################################
- ############################################################################
- RHCS 9.2:
- ############################################################################
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1419734 - CC: CMC: id-cmc-identityProofV2 feature
  implementation (cfu)
- Bugzilla Bug #1419742 - CC: CMC: provide Proof of Possession for encryption
  cert requests (cfu)
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1428020 - CC: CMC feature support: provided issuance
  protection cert mechanism (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-2" date="1492430400">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1282504 - Installing pki-server in container reports
  scriptlet failed, exit status 1 (jpazdziora)
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1410650 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHEL) (jmagne)
- Bugzilla Bug #1437591 - cli authentication using expired cert throws an
  exception (edewata)
- Bugzilla Bug #1437602 - non-CA cli looks for CA in the instance during a
  request (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHCS) (jmagne)
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1417307 - CC: Audit Review /Searches (edewata)
- Bugzilla Bug #1419737 - CC: CMC: id-cmc-popLinkWitnessV2 feature
  implementation (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-3" date="1493640000">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1303683 - dogtag should support GSSAPI based auth in
  conjuction with FreeIPA (ftweedal)
- Bugzilla Bug #1385208 - RHCS 9.1 RC5 CA in the certificate profiles the
  startTime parameter is not working as expected. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
- Bugzilla Bug #1426754 - PKCS12: upgrade to at least AES and SHA2 (ftweedal)
- Bugzilla Bug #1445088 - profile modification cannot remove existing config
  parameters (ftweedal)
- Bugzilla Bug #1445535 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHEL) (alee)
- Bugzilla Bug #1446874 - Missing ClientIP and ServerIP in audit log when
  pki CLI terminates SSL connection (edewata)
- Bugzilla Bug #1446875 - Session timeout for PKI console (RHEL) (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1404480 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHCS) (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
</package>
<package pkgid="528c4f3b4aeeedf77cd032ffc3bee3cbca2e2be46905e374c4496761e88988a1" name="pki-tools" arch="x86_64">
  <version epoch="0" ver="10.4.1" rel="10.el7"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-1" date="1490616000">- Require "nss &gt;= 3.28.3" as a build and runtime requirement
- Require "jss &gt;= 4.4.0-4" as a build and runtime requirement
- Require "tomcatjss &gt;= 7.2.1-3" as a build and runtime requirement
- dogtagpki Pagure Issue #2612 - Unable to clone due to pki pkcs12-cert-find
  failure (edewata)
- ############################################################################
- Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4
- Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.4.x
- ############################################################################
- RHEL 7.4:
- ############################################################################
- ############################################################################
- RHCS 9.2:
- ############################################################################
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1419734 - CC: CMC: id-cmc-identityProofV2 feature
  implementation (cfu)
- Bugzilla Bug #1419742 - CC: CMC: provide Proof of Possession for encryption
  cert requests (cfu)
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1428020 - CC: CMC feature support: provided issuance
  protection cert mechanism (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-2" date="1492430400">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1282504 - Installing pki-server in container reports
  scriptlet failed, exit status 1 (jpazdziora)
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1410650 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHEL) (jmagne)
- Bugzilla Bug #1437591 - cli authentication using expired cert throws an
  exception (edewata)
- Bugzilla Bug #1437602 - non-CA cli looks for CA in the instance during a
  request (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support
  for sc 7 g &amp; d cards (RHCS) (jmagne)
- ############################################################################
- Common Criteria
- ############################################################################
- Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures
  (edewata)
- Bugzilla Bug #1417307 - CC: Audit Review /Searches (edewata)
- Bugzilla Bug #1419737 - CC: CMC: id-cmc-popLinkWitnessV2 feature
  implementation (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-3" date="1493640000">- ############################################################################
- RHEL 7.4:
- ############################################################################
- Bugzilla Bug #1303683 - dogtag should support GSSAPI based auth in
  conjuction with FreeIPA (ftweedal)
- Bugzilla Bug #1385208 - RHCS 9.1 RC5 CA in the certificate profiles the
  startTime parameter is not working as expected. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
- Bugzilla Bug #1426754 - PKCS12: upgrade to at least AES and SHA2 (ftweedal)
- Bugzilla Bug #1445088 - profile modification cannot remove existing config
  parameters (ftweedal)
- Bugzilla Bug #1445535 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHEL) (alee)
- Bugzilla Bug #1446874 - Missing ClientIP and ServerIP in audit log when
  pki CLI terminates SSL connection (edewata)
- Bugzilla Bug #1446875 - Session timeout for PKI console (RHEL) (edewata)
- ############################################################################
- RHCS 9.2:
- ############################################################################
- Bugzilla Bug #1404480 - CC: Crypto Operation (AES Encryption/Decryption)
  (RHCS) (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
</package>
<package pkgid="c3cb09b93a446ec7a13dbe25c7907c3a53c2f342e5771157ee414e2639024a94" name="pki-tools" arch="i686">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="290d89850ebcbdd09e7985dabab59925b039ab56976cde9a0744b48cd0f44033" name="pki-tools" arch="x86_64">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="9a68201eee3be9b16c90fc8902c12ae91d7734cd4b8b5d2010ffc5ceb9ac3843" name="pki-tools" arch="i686">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="c6b0d3c8c9f78aead481634871d95370c835221a77ac69248ad59814a7a82ac2" name="pki-tools" arch="x86_64">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="0afb8e94bc5d3d8af9e7c540068d5bfbaf0befd829c9f6cc6be61f6c0ccf5af5" name="poppler" arch="i686">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="741a1e2a497a90cbbd1b3dad53095027187ef18b55cdd8b81485b8ddb2a7a193" name="poppler" arch="src">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="3bfa768c520bef00ec271c4f53ba8b80903a9cab799112304a575e3a1d91b3b4" name="poppler" arch="src">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="527992740f48dd1a90ef0ebfd601b889cbda1328b2c04310ec815af8361617da" name="poppler" arch="x86_64">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="94ffb327f7d199a886a81c42606e439ccb0bb4c4c2f1c33ada9d0cd6e045c1b8" name="poppler-cpp" arch="i686">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="b28079d600b57603a76e5db7bc3c39b82ef34690d7f283f692e6ca80ce986b0a" name="poppler-cpp" arch="x86_64">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="deda454b4af68e108cb356159b056487ed1e660f4f30c027bbf184b1e5eb2b1d" name="poppler-cpp-devel" arch="i686">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="cfd49642122e8241695e6cde9d9df55d75ef89969b1eb03ba0dfffcd427645c1" name="poppler-cpp-devel" arch="x86_64">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="8a63508b5d23a619aa1040c8c97503db495d5e3d661c18fc68b09b87ad22dfac" name="poppler-debuginfo" arch="i686">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="9ed3e0658a44d5adbfd94020a42d9ebf4ea1b1cf527f72f846d9b934735241f1" name="poppler-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="72711ab76a6f1cc0b061d855066e9268ad23cf30eb259e4a033bc97eb2ab9580" name="poppler-demos" arch="i686">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="1459aac444237837d9d58745a229c93318aa2c29dbb55204272a355d31fd6eb6" name="poppler-demos" arch="x86_64">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="164ff58b86c9bcc438079034dc0dbd5f10dc944c2964d07443594e14be8933a0" name="poppler-devel" arch="i686">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="4da1aaf281e006ddab008f84d1674ed97eb5b4a992974bcd3a99a84970023d5d" name="poppler-devel" arch="x86_64">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="78e7c38309b86f64ec4cce77059af0ed1ba311bd902c536da62005366c1adc26" name="poppler-glib" arch="i686">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="43815653902e122cfed321af63fd7f4dfc7b4ce3288322b3adcf63bcafc03002" name="poppler-glib" arch="x86_64">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="75822c3402cb4e2721e2a7d70b384da3296b57447a720c749f32d3dc03b42171" name="poppler-glib-devel" arch="i686">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="e35eacbeb793bad84c9bef7caf670e153bcf34a069db41797cffdca79fcbb692" name="poppler-glib-devel" arch="x86_64">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="3a2d2d1b7ce38f41b78f3dfd6dab343cc48dc13b528285fee70781681a3ab3e6" name="poppler-qt" arch="i686">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="907aa3efc46b31ce2423e189f773e24740b416750f01b2a8b727e43785ec836a" name="poppler-qt" arch="x86_64">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="821117800722863750226dca023055bf38ba3c9a32b0c6447dac2a9d8c177aa0" name="poppler-qt-devel" arch="i686">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="bde21e02aee62e9dd97102488140923b4cd631201925a26c622d0b9fadb17b7b" name="poppler-qt-devel" arch="x86_64">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="393568b7ff4c5c37734c385116803b1ec59975b7c1a1eef1fcc6b8277ccc3e7a" name="poppler-utils" arch="i686">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="fc059f9392150cdba89a702df6f94843e1bb8464154f4193e44dd29178d24501" name="poppler-utils" arch="x86_64">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="82114acbd7f26d544e81b7563537159e0f2040081795a5fb21ff73aca8fd8b03" name="postgresql" arch="i686">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="ec9e94a63246f4600b9ca78fb675c6addaf46e3e350232a52bce29a2612f3d4a" name="postgresql" arch="src">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="ded3fa4ca9d946c6ec6c4eec98dd607701bd361d7af4d17b69293de81781d038" name="postgresql" arch="src">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="ddebb53e4c9c46077ae27071cbcc572ea1fb0de1dcac5dc1e84ab6a1a6e0eb4c" name="postgresql" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="9bc28c32d8210b2156ebf0d08eeede41c6c269efe46be46588e6faef56e4ae10" name="postgresql" arch="i686">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="d7e674aa1881ad4539da973f860d1b183ca86c211fd28530d419e7bcbe94323a" name="postgresql" arch="src">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="118e8d9b0d9c55b6d564a3f7749bc245f18551cdce0213d636a8800888e02725" name="postgresql" arch="src">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="07e3a9950ece4e4b3d5b347a8361ff7c03e0e2b4dd46d9c5130a15ed51c22310" name="postgresql" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="eab86b5b36cf0b4abc624b0a5958d4c7fa44dba8aed0da01888f51064b31738a" name="postgresql-contrib" arch="i686">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="9d3696be1b3123eb5001dd0ab8044766a9ebe1b29d0579cb7b00683f5f53ba9f" name="postgresql-contrib" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="e74ba6df63ae3ae45fa5b9714c419b94ddfe597f905ba7cf5d241d9e95b8d8fc" name="postgresql-contrib" arch="i686">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="42c22f976cebd88d0b24d1469813433bec19e8b6ff68906d3935a18620f4b19d" name="postgresql-contrib" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="d1e7e24d087aa06795871a281aea215177e3891f24c161a9a895551cf303db2f" name="postgresql-debuginfo" arch="i686">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="49b2ab5f29d6ef57b45b4eb5f42883132b7ce70e9b028ba3bb73deb881bec853" name="postgresql-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="af36ae84422b99710131c03f01ba1bd8304b6315ae3ada28c26e90c9fccdbf7d" name="postgresql-debuginfo" arch="i686">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="7ab75e5820fc0701713ebbadbf4b3516870f3a3432813d62ea0b6e59a6c44f01" name="postgresql-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="032a32df49de17ef98722d06232b94e822e7960c809cd66baa37c6bb6a759cd9" name="postgresql-devel" arch="i686">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="7c2afba1daf65e0f6ba28807a22797a0015810fdc7f68ff6ee416ac88a0c0edb" name="postgresql-devel" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="034f7cf2c392bdf4b424435036d30125ec400d6b95194b6b7417e2d7f39947f5" name="postgresql-devel" arch="i686">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="9cd91efa61d18aeaff1803ef9d884a25a6c35edda9512314dcb829b5fe2af96d" name="postgresql-devel" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="5b956028067aec7e981894849d0ffc2046919659b1a5c823f054668b8b850e31" name="postgresql-docs" arch="i686">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="6c31a6a40f8da57f95b65d63af08ba73ee3b66b868c171adf00e48383a2c72e1" name="postgresql-docs" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="2bee04a5c696e3991b8eb119fe0be51b893a52893f809cea8e5462e104148a68" name="postgresql-docs" arch="i686">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="d7d08f7efed46ac7f6a9c43a77ab6383920771df91c01bcf51399003be72afd8" name="postgresql-docs" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="1976cb8a99074e030a518d84ed2c4537424c83cc7c20a695f5fb7c75f2139dfb" name="postgresql-libs" arch="i686">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="770d4174d28eb8b5686abf84a6e755a2514503b2a684530737f27f94f116aa00" name="postgresql-libs" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="ab2c4d29bd22f5d8bed386f3df539788b77f816218e0ccc23c4dfd69fb918a58" name="postgresql-libs" arch="i686">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="38339aa8ba19d5eeb7273c193f3750e9a4f83ba0b1911f39ad07cf479b3081f2" name="postgresql-libs" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="6542439b553d92750ca99ea2dc10f977f93f2a0994f039ae7d8bcc1827738f81" name="postgresql-plperl" arch="i686">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="80f1389fce2439c18d0971ad2c329e055c71baf7cb57c30c0260926e3a6f6ac8" name="postgresql-plperl" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="24e70a48fde83d982dcb8223858c4ff0c0eb239f36b8d5d7a02f74cf34d0fdd0" name="postgresql-plperl" arch="i686">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="c456250367b7b5cdec124d46bf47f43b60981c8d75340b05a25a25ffcc73bc83" name="postgresql-plperl" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="f38a444bcc3604d0f9465ffa9821caf06ac0f4b9d82bb65db1820d4e047fce06" name="postgresql-plpython" arch="i686">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="8c8e39858ac6cb2aa0ca4aefaadde3faa87f04fa3a2ba2de2f917710052077c3" name="postgresql-plpython" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="e24c47d4e6d3efcf81f87b300f86ecb456ecd296174818ae6de7e7a92bf18542" name="postgresql-plpython" arch="i686">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="24e11a0ea620bcb2eca40704d3fa042cf6463a36568631ea74bb1a5e0da51129" name="postgresql-plpython" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="ea8774267347fbbdf86ac9e35d59e0570d89090f151f3df2bba592fa53503413" name="postgresql-pltcl" arch="i686">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="d26296646e6bd8b9360c269bba48968fbc9891ca99b4ef1a028b8f265617d5c8" name="postgresql-pltcl" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="38963945bf3b41f75d396b11cab4c8f533af46457c2c48956563478656b80dc0" name="postgresql-pltcl" arch="i686">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="b7f510d9b947ee91f76fffb857e3dbf170c92a9cfb2ecd4213f8d13e4631e42a" name="postgresql-pltcl" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="0f675b441c9a099e90e471e9d349992653d946821d14ff36e223d1e904e98dfb" name="postgresql-server" arch="i686">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="875baf39ebff160e58a0885134f27e646a9060dbb207b0e80c3502488ab3463a" name="postgresql-server" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="0af3b0773a7dd8b748982755cda9cf5a096c0bfe0fd7092ca569f6123f13bb74" name="postgresql-server" arch="i686">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="57cad4404d43f5845983f4df13b1d3ca76d20cc9252d6df1ed2e60feb95a4664" name="postgresql-server" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="b9a496d810079587abfe2f87b5181546106711e7352b84d1dc7a535c0f7d542f" name="postgresql-static" arch="i686">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="f5af6701e652cba7c23474bb2850cf2274834e7b296db8b358f426105a92a8f1" name="postgresql-static" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="0a847ae7f11015acbda881acc560cdce3fa2130c37b6d6987863b666df57e546" name="postgresql-static" arch="i686">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="62cc885ce259bee9b0c5961fc4f4c4fdad1fa6b6f02ff3486c854d13f9ace816" name="postgresql-static" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="dfced5783adf1c3d07285817e1f90d6dcc9cacead23ae25a0123c98fc2636dc0" name="postgresql-test" arch="i686">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="dece2a918ace78dd55d707dcf252088c5497eec48d1168b5abd347418f2fe2d9" name="postgresql-test" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="c4e4581dbb9347ff3b36bad56ce91984a44eacf809ce25314f7e3332a95ec24c" name="postgresql-test" arch="i686">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="fda962493c6ade0f587c0ddde0a45b0836c42731fc98ca80fa7eebcad2764556" name="postgresql-test" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="a63c05babaf56285d0e7bd76fd81edde07b337eeff83fd2911b794d42edf3538" name="postgresql-upgrade" arch="i686">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="fc6bcd9dc8fba0a6f49a6ee6a6f6c08e6ad25a902449a0b55fa28bedad3e12ba" name="postgresql-upgrade" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="677f0ec15a798691d063ffab8dee9957181232828ee600326ea5b5acc0472ed6" name="postgresql-upgrade" arch="i686">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="b4ae5f7fe1a17c6ec06dd5214ebc42d4c076ee7080e94eb0ddf0ae7e931ed101" name="postgresql-upgrade" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="ca2a2b14212286127309b7e5ad8f2b5db0c975b48d60e13ff92c0307330894d3" name="procmail" arch="i686">
  <version epoch="0" ver="3.22" rel="36.el7_4.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.22-28" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-29" date="1326715200">- Rebuilt without NO_NFS_ATIME_HACK
  Resolves: rhbz#666383</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.22-30" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-31" date="1346760000">- Hardened build with PIE and full RELRO
  Resolves: rhbz#853186</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-32" date="1359979200">- Updated sources URLs</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.22-33" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.22-34" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-35" date="1409832000">- Fixed buffer overflow in formail
  Resolves: CVE-2014-3618</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-36" date="1490184000">- Fixed several out of bounds RWs
  Resolves: rhbz#1138526</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-36.1" date="1511265600">- Fixed possible buffer overflow in loadbuf function
  Resolves: CVE-2017-16844</changelog>
</package>
<package pkgid="5ce14d86dc13e37fb645b03a3b42ce7a8cbd3058c8248d54e207ee8d8b72288b" name="procmail" arch="src">
  <version epoch="0" ver="3.22" rel="36.el7_4.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.22-28" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-29" date="1326715200">- Rebuilt without NO_NFS_ATIME_HACK
  Resolves: rhbz#666383</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.22-30" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-31" date="1346760000">- Hardened build with PIE and full RELRO
  Resolves: rhbz#853186</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-32" date="1359979200">- Updated sources URLs</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.22-33" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.22-34" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-35" date="1409832000">- Fixed buffer overflow in formail
  Resolves: CVE-2014-3618</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-36" date="1490184000">- Fixed several out of bounds RWs
  Resolves: rhbz#1138526</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-36.1" date="1511265600">- Fixed possible buffer overflow in loadbuf function
  Resolves: CVE-2017-16844</changelog>
</package>
<package pkgid="3c4b8e3071a33639a8c67c91cdb5ad4112c4111a2e73ec9b72689f48782853a0" name="procmail" arch="src">
  <version epoch="0" ver="3.22" rel="36.el7_4.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.22-28" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-29" date="1326715200">- Rebuilt without NO_NFS_ATIME_HACK
  Resolves: rhbz#666383</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.22-30" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-31" date="1346760000">- Hardened build with PIE and full RELRO
  Resolves: rhbz#853186</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-32" date="1359979200">- Updated sources URLs</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.22-33" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.22-34" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-35" date="1409832000">- Fixed buffer overflow in formail
  Resolves: CVE-2014-3618</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-36" date="1490184000">- Fixed several out of bounds RWs
  Resolves: rhbz#1138526</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-36.1" date="1511265600">- Fixed possible buffer overflow in loadbuf function
  Resolves: CVE-2017-16844</changelog>
</package>
<package pkgid="fe97f7b46a6a9380f0e78ccb89181b355da3667810c8c5d23a683cebd062fa53" name="procmail" arch="x86_64">
  <version epoch="0" ver="3.22" rel="36.el7_4.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.22-28" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-29" date="1326715200">- Rebuilt without NO_NFS_ATIME_HACK
  Resolves: rhbz#666383</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.22-30" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-31" date="1346760000">- Hardened build with PIE and full RELRO
  Resolves: rhbz#853186</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-32" date="1359979200">- Updated sources URLs</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.22-33" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.22-34" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-35" date="1409832000">- Fixed buffer overflow in formail
  Resolves: CVE-2014-3618</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-36" date="1490184000">- Fixed several out of bounds RWs
  Resolves: rhbz#1138526</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-36.1" date="1511265600">- Fixed possible buffer overflow in loadbuf function
  Resolves: CVE-2017-16844</changelog>
</package>
<package pkgid="7a515efce666306c1c0442b7c902f2cec1c03f8d1fdd9649d0860dd7d0972a07" name="procmail-debuginfo" arch="i686">
  <version epoch="0" ver="3.22" rel="36.el7_4.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.22-28" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-29" date="1326715200">- Rebuilt without NO_NFS_ATIME_HACK
  Resolves: rhbz#666383</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.22-30" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-31" date="1346760000">- Hardened build with PIE and full RELRO
  Resolves: rhbz#853186</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-32" date="1359979200">- Updated sources URLs</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.22-33" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.22-34" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-35" date="1409832000">- Fixed buffer overflow in formail
  Resolves: CVE-2014-3618</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-36" date="1490184000">- Fixed several out of bounds RWs
  Resolves: rhbz#1138526</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-36.1" date="1511265600">- Fixed possible buffer overflow in loadbuf function
  Resolves: CVE-2017-16844</changelog>
</package>
<package pkgid="1cd32365c512eef6ef9b647a6b9f1a165a0e43c30597b29d8b886ce4f6cdafdd" name="procmail-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.22" rel="36.el7_4.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.22-28" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-29" date="1326715200">- Rebuilt without NO_NFS_ATIME_HACK
  Resolves: rhbz#666383</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.22-30" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-31" date="1346760000">- Hardened build with PIE and full RELRO
  Resolves: rhbz#853186</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-32" date="1359979200">- Updated sources URLs</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.22-33" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.22-34" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-35" date="1409832000">- Fixed buffer overflow in formail
  Resolves: CVE-2014-3618</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-36" date="1490184000">- Fixed several out of bounds RWs
  Resolves: rhbz#1138526</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-36.1" date="1511265600">- Fixed possible buffer overflow in loadbuf function
  Resolves: CVE-2017-16844</changelog>
</package>
<package pkgid="6443a8a5182f2e2b4b75f1c43199fd22b0ec0d8f2a072b269aaddac209034f33" name="pygobject3" arch="src">
  <version epoch="0" ver="3.22.0" rel="1.el7_4.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.13.4-2" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-1" date="1408449600">- Update to 3.13.90</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-2" date="1408622400">- Backport a fix for virt-manager crash (#1130758)</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.91-1" date="1409659200">- Update to 3.13.91</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.92-1" date="1410868800">- Update to 3.13.92</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.14.0-1" date="1411387200">- Update to 3.14.0</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.14.0-2" date="1432296000">- Add patch to fix a coverity issue
  https://bugzilla.gnome.org/show_bug.cgi?id=749698</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 3.14.0-3" date="1442318400">- Allow importing static modules to fix RHEL7 rebase regressions</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474286400">- Update to 3.22.0
- Resolves: #1387039</changelog>
  <changelog author="John Francini - 3.22.0-1.1" date="1510228800">- Bump release to allow rebuild to fix BZ#1510160</changelog>
</package>
<package pkgid="ee549b762e22cb9e8a6e03d7e41c70e19693a0f6c307465fd0c644a31e72ec7d" name="pygobject3" arch="src">
  <version epoch="0" ver="3.22.0" rel="1.el7_4.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.13.4-2" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-1" date="1408449600">- Update to 3.13.90</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-2" date="1408622400">- Backport a fix for virt-manager crash (#1130758)</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.91-1" date="1409659200">- Update to 3.13.91</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.92-1" date="1410868800">- Update to 3.13.92</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.14.0-1" date="1411387200">- Update to 3.14.0</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.14.0-2" date="1432296000">- Add patch to fix a coverity issue
  https://bugzilla.gnome.org/show_bug.cgi?id=749698</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 3.14.0-3" date="1442318400">- Allow importing static modules to fix RHEL7 rebase regressions</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474286400">- Update to 3.22.0
- Resolves: #1387039</changelog>
  <changelog author="John Francini - 3.22.0-1.1" date="1510228800">- Bump release to allow rebuild to fix BZ#1510160</changelog>
</package>
<package pkgid="8001cebc3eab2d117904d529f91eb29b82d3747486e8e82fe81f214dba234453" name="pygobject3-debuginfo" arch="i686">
  <version epoch="0" ver="3.22.0" rel="1.el7_4.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.13.4-2" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-1" date="1408449600">- Update to 3.13.90</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-2" date="1408622400">- Backport a fix for virt-manager crash (#1130758)</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.91-1" date="1409659200">- Update to 3.13.91</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.92-1" date="1410868800">- Update to 3.13.92</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.14.0-1" date="1411387200">- Update to 3.14.0</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.14.0-2" date="1432296000">- Add patch to fix a coverity issue
  https://bugzilla.gnome.org/show_bug.cgi?id=749698</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 3.14.0-3" date="1442318400">- Allow importing static modules to fix RHEL7 rebase regressions</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474286400">- Update to 3.22.0
- Resolves: #1387039</changelog>
  <changelog author="John Francini - 3.22.0-1.1" date="1510228800">- Bump release to allow rebuild to fix BZ#1510160</changelog>
</package>
<package pkgid="51842d82acc374ad86c78db41f82a0040e66170b1af96f596a15fdf7e48549b3" name="pygobject3-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.22.0" rel="1.el7_4.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.13.4-2" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-1" date="1408449600">- Update to 3.13.90</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-2" date="1408622400">- Backport a fix for virt-manager crash (#1130758)</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.91-1" date="1409659200">- Update to 3.13.91</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.92-1" date="1410868800">- Update to 3.13.92</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.14.0-1" date="1411387200">- Update to 3.14.0</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.14.0-2" date="1432296000">- Add patch to fix a coverity issue
  https://bugzilla.gnome.org/show_bug.cgi?id=749698</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 3.14.0-3" date="1442318400">- Allow importing static modules to fix RHEL7 rebase regressions</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474286400">- Update to 3.22.0
- Resolves: #1387039</changelog>
  <changelog author="John Francini - 3.22.0-1.1" date="1510228800">- Bump release to allow rebuild to fix BZ#1510160</changelog>
</package>
<package pkgid="5db216974ccc02c15708af30369b7656faec94b88765574c9c3a0b2e86366113" name="pygobject3-devel" arch="i686">
  <version epoch="0" ver="3.22.0" rel="1.el7_4.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.13.4-2" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-1" date="1408449600">- Update to 3.13.90</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-2" date="1408622400">- Backport a fix for virt-manager crash (#1130758)</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.91-1" date="1409659200">- Update to 3.13.91</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.92-1" date="1410868800">- Update to 3.13.92</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.14.0-1" date="1411387200">- Update to 3.14.0</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.14.0-2" date="1432296000">- Add patch to fix a coverity issue
  https://bugzilla.gnome.org/show_bug.cgi?id=749698</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 3.14.0-3" date="1442318400">- Allow importing static modules to fix RHEL7 rebase regressions</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474286400">- Update to 3.22.0
- Resolves: #1387039</changelog>
  <changelog author="John Francini - 3.22.0-1.1" date="1510228800">- Bump release to allow rebuild to fix BZ#1510160</changelog>
</package>
<package pkgid="93000f0d3421cc8100416f40045b9b73dd08a88945e0dd78b7566f2f127c7af0" name="pygobject3-devel" arch="x86_64">
  <version epoch="0" ver="3.22.0" rel="1.el7_4.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.13.4-2" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-1" date="1408449600">- Update to 3.13.90</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-2" date="1408622400">- Backport a fix for virt-manager crash (#1130758)</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.91-1" date="1409659200">- Update to 3.13.91</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.92-1" date="1410868800">- Update to 3.13.92</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.14.0-1" date="1411387200">- Update to 3.14.0</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.14.0-2" date="1432296000">- Add patch to fix a coverity issue
  https://bugzilla.gnome.org/show_bug.cgi?id=749698</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 3.14.0-3" date="1442318400">- Allow importing static modules to fix RHEL7 rebase regressions</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474286400">- Update to 3.22.0
- Resolves: #1387039</changelog>
  <changelog author="John Francini - 3.22.0-1.1" date="1510228800">- Bump release to allow rebuild to fix BZ#1510160</changelog>
</package>
<package pkgid="9b8c59157bc27973727e472bb17b9d9f94b5fd0ee65c8bb9ab7c1d40c2cb9ca9" name="python-cryptography" arch="src">
  <version epoch="0" ver="1.7.2" rel="1.el7_4.1"/>
  <changelog author="Robert Kuska &lt;rkuska@redhat.com&gt; - 1.0.2-2" date="1446638400">- Rebuilt for Python3.5 rebuild</changelog>
  <changelog author="Robert Kuska &lt;rkuska@redhat.com&gt; - 1.1-1" date="1447243200">- Update to v1.1</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.2.1-1" date="1452340800">- Update to v1.2.1</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.2.1-2" date="1452513600">- Move python-cryptograph =&gt; python2-cryptography</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-3" date="1454587200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.3.1-1" date="1462276800">- Update to v1.3.1</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.3.1-2" date="1462881600">- Make it easier to build on EL7</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.3.1-3" date="1462881601">- Remove versioned setuptools dependency</changelog>
  <changelog author="Christian Heimes &lt;cheimes@redhat.com&gt; - 1.7.2-1" date="1487073600">- Update to 1.7.2
- Disable pytest.deprecated_call() tests
- Remove versioned pytest
- Add build requirements pytz</changelog>
  <changelog author="Christian Heimes &lt;cheimes@redhat.com&gt; - 1.7.2-1.1" date="1502712000">- Ignore errors on OpenSSL's error stack when initializing, fixes RHBZ#1485896
- Fix parsing of long OIDs, fixes RHBZ#1485898</changelog>
</package>
<package pkgid="88d77198226c7fc2c9b04467d31b6868711a8760fa6299d192fb6994f59d8035" name="python-cryptography" arch="src">
  <version epoch="0" ver="1.7.2" rel="1.el7_4.1"/>
  <changelog author="Robert Kuska &lt;rkuska@redhat.com&gt; - 1.0.2-2" date="1446638400">- Rebuilt for Python3.5 rebuild</changelog>
  <changelog author="Robert Kuska &lt;rkuska@redhat.com&gt; - 1.1-1" date="1447243200">- Update to v1.1</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.2.1-1" date="1452340800">- Update to v1.2.1</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.2.1-2" date="1452513600">- Move python-cryptograph =&gt; python2-cryptography</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-3" date="1454587200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.3.1-1" date="1462276800">- Update to v1.3.1</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.3.1-2" date="1462881600">- Make it easier to build on EL7</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.3.1-3" date="1462881601">- Remove versioned setuptools dependency</changelog>
  <changelog author="Christian Heimes &lt;cheimes@redhat.com&gt; - 1.7.2-1" date="1487073600">- Update to 1.7.2
- Disable pytest.deprecated_call() tests
- Remove versioned pytest
- Add build requirements pytz</changelog>
  <changelog author="Christian Heimes &lt;cheimes@redhat.com&gt; - 1.7.2-1.1" date="1502712000">- Ignore errors on OpenSSL's error stack when initializing, fixes RHBZ#1485896
- Fix parsing of long OIDs, fixes RHBZ#1485898</changelog>
</package>
<package pkgid="2cab202bb9914317fbdf330637f3e3edca66e2c932159c79d755168803bafe40" name="python-cryptography-debuginfo" arch="i686">
  <version epoch="0" ver="1.7.2" rel="1.el7_4.1"/>
  <changelog author="Robert Kuska &lt;rkuska@redhat.com&gt; - 1.0.2-2" date="1446638400">- Rebuilt for Python3.5 rebuild</changelog>
  <changelog author="Robert Kuska &lt;rkuska@redhat.com&gt; - 1.1-1" date="1447243200">- Update to v1.1</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.2.1-1" date="1452340800">- Update to v1.2.1</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.2.1-2" date="1452513600">- Move python-cryptograph =&gt; python2-cryptography</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-3" date="1454587200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.3.1-1" date="1462276800">- Update to v1.3.1</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.3.1-2" date="1462881600">- Make it easier to build on EL7</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.3.1-3" date="1462881601">- Remove versioned setuptools dependency</changelog>
  <changelog author="Christian Heimes &lt;cheimes@redhat.com&gt; - 1.7.2-1" date="1487073600">- Update to 1.7.2
- Disable pytest.deprecated_call() tests
- Remove versioned pytest
- Add build requirements pytz</changelog>
  <changelog author="Christian Heimes &lt;cheimes@redhat.com&gt; - 1.7.2-1.1" date="1502712000">- Ignore errors on OpenSSL's error stack when initializing, fixes RHBZ#1485896
- Fix parsing of long OIDs, fixes RHBZ#1485898</changelog>
</package>
<package pkgid="67a4b845dfc0841e590711753882f7560488ba4e78034a03557c25c161c9e742" name="python-cryptography-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="1.el7_4.1"/>
  <changelog author="Robert Kuska &lt;rkuska@redhat.com&gt; - 1.0.2-2" date="1446638400">- Rebuilt for Python3.5 rebuild</changelog>
  <changelog author="Robert Kuska &lt;rkuska@redhat.com&gt; - 1.1-1" date="1447243200">- Update to v1.1</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.2.1-1" date="1452340800">- Update to v1.2.1</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.2.1-2" date="1452513600">- Move python-cryptograph =&gt; python2-cryptography</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-3" date="1454587200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.3.1-1" date="1462276800">- Update to v1.3.1</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.3.1-2" date="1462881600">- Make it easier to build on EL7</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.3.1-3" date="1462881601">- Remove versioned setuptools dependency</changelog>
  <changelog author="Christian Heimes &lt;cheimes@redhat.com&gt; - 1.7.2-1" date="1487073600">- Update to 1.7.2
- Disable pytest.deprecated_call() tests
- Remove versioned pytest
- Add build requirements pytz</changelog>
  <changelog author="Christian Heimes &lt;cheimes@redhat.com&gt; - 1.7.2-1.1" date="1502712000">- Ignore errors on OpenSSL's error stack when initializing, fixes RHBZ#1485896
- Fix parsing of long OIDs, fixes RHBZ#1485898</changelog>
</package>
<package pkgid="6659fc5e3cf19f69cc69ce7d8440f035df78cab1c2d9b61d29338233aaf536a8" name="python-dmidecode" arch="i686">
  <version epoch="0" ver="3.12.2" rel="1.1.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.10.13-4" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; 3.10.14-5" date="1342699200">- Upstream relocated. Document source tag and tarball generation.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.10.13-6" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.10.13-7" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; - 3.10.13-8" date="1371470400">- Attribute dmispec may cause invalid XML on some hardware.
- Signal handler for SIGILL.</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; - 3.10.13-9" date="1371729600">- Attribute installed may appear as duplicate and cause invalid XML.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.10.13-10" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.10.13-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 3.12.2-1" date="1489406400">- Update to new release
- Resolves: #1431548</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 3.12.2-1.1" date="1511179200">- Revert interface changes
- Resolves: #1514017</changelog>
</package>
<package pkgid="4c0f6a38c468790a2b3a4500a6415ba7538afc6befa64fc278e34c9f85474573" name="python-dmidecode" arch="src">
  <version epoch="0" ver="3.12.2" rel="1.1.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.10.13-4" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; 3.10.14-5" date="1342699200">- Upstream relocated. Document source tag and tarball generation.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.10.13-6" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.10.13-7" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; - 3.10.13-8" date="1371470400">- Attribute dmispec may cause invalid XML on some hardware.
- Signal handler for SIGILL.</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; - 3.10.13-9" date="1371729600">- Attribute installed may appear as duplicate and cause invalid XML.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.10.13-10" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.10.13-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 3.12.2-1" date="1489406400">- Update to new release
- Resolves: #1431548</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 3.12.2-1.1" date="1511179200">- Revert interface changes
- Resolves: #1514017</changelog>
</package>
<package pkgid="9b2b89628e239100f033d7772fb329b49aa8157676830541bc4a905f039ac2d2" name="python-dmidecode" arch="src">
  <version epoch="0" ver="3.12.2" rel="1.1.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.10.13-4" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; 3.10.14-5" date="1342699200">- Upstream relocated. Document source tag and tarball generation.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.10.13-6" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.10.13-7" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; - 3.10.13-8" date="1371470400">- Attribute dmispec may cause invalid XML on some hardware.
- Signal handler for SIGILL.</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; - 3.10.13-9" date="1371729600">- Attribute installed may appear as duplicate and cause invalid XML.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.10.13-10" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.10.13-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 3.12.2-1" date="1489406400">- Update to new release
- Resolves: #1431548</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 3.12.2-1.1" date="1511179200">- Revert interface changes
- Resolves: #1514017</changelog>
</package>
<package pkgid="97a80109db87d6ec3ee1ab9e782dd90a9f87e08fc32680cd88e66ae8fd48706c" name="python-dmidecode" arch="x86_64">
  <version epoch="0" ver="3.12.2" rel="1.1.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.10.13-4" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; 3.10.14-5" date="1342699200">- Upstream relocated. Document source tag and tarball generation.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.10.13-6" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.10.13-7" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; - 3.10.13-8" date="1371470400">- Attribute dmispec may cause invalid XML on some hardware.
- Signal handler for SIGILL.</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; - 3.10.13-9" date="1371729600">- Attribute installed may appear as duplicate and cause invalid XML.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.10.13-10" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.10.13-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 3.12.2-1" date="1489406400">- Update to new release
- Resolves: #1431548</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 3.12.2-1.1" date="1511179200">- Revert interface changes
- Resolves: #1514017</changelog>
</package>
<package pkgid="52d8665987c2fcfc9965493582f2d5f9163f8de50cb6d54754f6f1048ed54ede" name="python-dmidecode-debuginfo" arch="i686">
  <version epoch="0" ver="3.12.2" rel="1.1.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.10.13-4" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; 3.10.14-5" date="1342699200">- Upstream relocated. Document source tag and tarball generation.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.10.13-6" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.10.13-7" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; - 3.10.13-8" date="1371470400">- Attribute dmispec may cause invalid XML on some hardware.
- Signal handler for SIGILL.</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; - 3.10.13-9" date="1371729600">- Attribute installed may appear as duplicate and cause invalid XML.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.10.13-10" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.10.13-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 3.12.2-1" date="1489406400">- Update to new release
- Resolves: #1431548</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 3.12.2-1.1" date="1511179200">- Revert interface changes
- Resolves: #1514017</changelog>
</package>
<package pkgid="f76a971dffe8a9eeb7ee5e58d34c136acaae475af85225950f814a5e232a1335" name="python-dmidecode-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.12.2" rel="1.1.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.10.13-4" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; 3.10.14-5" date="1342699200">- Upstream relocated. Document source tag and tarball generation.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.10.13-6" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.10.13-7" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; - 3.10.13-8" date="1371470400">- Attribute dmispec may cause invalid XML on some hardware.
- Signal handler for SIGILL.</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; - 3.10.13-9" date="1371729600">- Attribute installed may appear as duplicate and cause invalid XML.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.10.13-10" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.10.13-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 3.12.2-1" date="1489406400">- Update to new release
- Resolves: #1431548</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 3.12.2-1.1" date="1511179200">- Revert interface changes
- Resolves: #1514017</changelog>
</package>
<package pkgid="110669e8507f2a91cc9c717642b892b27db7ad8bcec37c79a63967e8af8c4164" name="python-gobject" arch="i686">
  <version epoch="0" ver="3.22.0" rel="1.el7_4.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.13.4-2" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-1" date="1408449600">- Update to 3.13.90</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-2" date="1408622400">- Backport a fix for virt-manager crash (#1130758)</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.91-1" date="1409659200">- Update to 3.13.91</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.92-1" date="1410868800">- Update to 3.13.92</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.14.0-1" date="1411387200">- Update to 3.14.0</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.14.0-2" date="1432296000">- Add patch to fix a coverity issue
  https://bugzilla.gnome.org/show_bug.cgi?id=749698</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 3.14.0-3" date="1442318400">- Allow importing static modules to fix RHEL7 rebase regressions</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474286400">- Update to 3.22.0
- Resolves: #1387039</changelog>
  <changelog author="John Francini - 3.22.0-1.1" date="1510228800">- Bump release to allow rebuild to fix BZ#1510160</changelog>
</package>
<package pkgid="982754ca7b658485ee8058412fdd3df1b7f0498646e95f64f978ee5a1493c800" name="python-gobject" arch="x86_64">
  <version epoch="0" ver="3.22.0" rel="1.el7_4.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.13.4-2" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-1" date="1408449600">- Update to 3.13.90</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-2" date="1408622400">- Backport a fix for virt-manager crash (#1130758)</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.91-1" date="1409659200">- Update to 3.13.91</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.92-1" date="1410868800">- Update to 3.13.92</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.14.0-1" date="1411387200">- Update to 3.14.0</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.14.0-2" date="1432296000">- Add patch to fix a coverity issue
  https://bugzilla.gnome.org/show_bug.cgi?id=749698</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 3.14.0-3" date="1442318400">- Allow importing static modules to fix RHEL7 rebase regressions</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474286400">- Update to 3.22.0
- Resolves: #1387039</changelog>
  <changelog author="John Francini - 3.22.0-1.1" date="1510228800">- Bump release to allow rebuild to fix BZ#1510160</changelog>
</package>
<package pkgid="2abaa30defca365fbd153014b4964315f10162e1a74d0454f0fa1c038937c89a" name="python-gobject-base" arch="i686">
  <version epoch="0" ver="3.22.0" rel="1.el7_4.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.13.4-2" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-1" date="1408449600">- Update to 3.13.90</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-2" date="1408622400">- Backport a fix for virt-manager crash (#1130758)</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.91-1" date="1409659200">- Update to 3.13.91</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.92-1" date="1410868800">- Update to 3.13.92</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.14.0-1" date="1411387200">- Update to 3.14.0</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.14.0-2" date="1432296000">- Add patch to fix a coverity issue
  https://bugzilla.gnome.org/show_bug.cgi?id=749698</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 3.14.0-3" date="1442318400">- Allow importing static modules to fix RHEL7 rebase regressions</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474286400">- Update to 3.22.0
- Resolves: #1387039</changelog>
  <changelog author="John Francini - 3.22.0-1.1" date="1510228800">- Bump release to allow rebuild to fix BZ#1510160</changelog>
</package>
<package pkgid="7ccc62d63104dec3a9ad8f04f2862e94c48d7cea300da00e9fac61eb72960955" name="python-gobject-base" arch="x86_64">
  <version epoch="0" ver="3.22.0" rel="1.el7_4.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.13.4-2" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-1" date="1408449600">- Update to 3.13.90</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-2" date="1408622400">- Backport a fix for virt-manager crash (#1130758)</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.91-1" date="1409659200">- Update to 3.13.91</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.92-1" date="1410868800">- Update to 3.13.92</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.14.0-1" date="1411387200">- Update to 3.14.0</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.14.0-2" date="1432296000">- Add patch to fix a coverity issue
  https://bugzilla.gnome.org/show_bug.cgi?id=749698</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 3.14.0-3" date="1442318400">- Allow importing static modules to fix RHEL7 rebase regressions</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474286400">- Update to 3.22.0
- Resolves: #1387039</changelog>
  <changelog author="John Francini - 3.22.0-1.1" date="1510228800">- Bump release to allow rebuild to fix BZ#1510160</changelog>
</package>
<package pkgid="a3294925c3100c1666af45bd2a6e95d4b8925e1b8a73b58e699594b28cefd60f" name="python-libguestfs" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.50" date="1440936000">- v2v:
  * When debugging, dump OVF to stderr.
  * Ignore missing kernels from grub
    resolves: rhbz#1230412
  * Calculate VMware dcPath correctly (1256823)
  * Map empty VMware network or bridge name to default (1257895)
- p2v:
  * Wait for network to come online before testing connection
    resolves: rhbz#1256222
- Fix tests to run correctly with libguestfs-winsupport 7.2.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.51" date="1441108800">- v2v: Fix handling of extra slashes in dcPath calculation
  resolves: rhbz#1258342 rhbz#1256823
- v2v: Fix -oa preallocation option
  resolves: rhbz#1251909</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
</package>
<package pkgid="b946679608a10440c836bdb6938a031f467d5d3c9368f6c650c3f27b6a0d3526" name="python-libguestfs" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="ee04a586617ec2356af578ffb297a07199a4ed3790aee5c48960e71b21db7932" name="python-libipa_hbac" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="1c4f0a7de761df92a0b19cc286dfef5a403ed9cbb8dab1aa3ca3f817ca3c0bd6" name="python-libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="4e3f23ab62e203ee39919071ed60bdda8283dd2b21f96a75925ce615257a9d67" name="python-libipa_hbac" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="67073952f64e6da4edfecaa56b69232ea6d42d60ccc58628f95907dbb567b533" name="python-libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="5edd072516e8894935c022c068820399cafa8c22d221bcf6f60cb12bf96feabc" name="python-libipa_hbac" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="16203858f454558088e51fa78fa4d2c09cf469a661378137ce6f5ccd9f00a8ac" name="python-libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="8927e21d4938274b927a5113f97d8ea9968380a640bc22928dc77ebc58d72ecc" name="python-libipa_hbac" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="717494b62bc51ddd3206e6827b1d3f2bfc7411472315cccb00ea139469dabbef" name="python-libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="7bf622cafa4b2f69b4cca9b561edff7e69af76471c417f6e4a61840e6251c531" name="python-libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="178dc692cc2bdc140a5d0fbd51187355c01c21ef36de27696a3c2d6407c57003" name="python-libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="cf5cfbf9aacb31b1198434152fcf54d8922acab8f993cbf547007d0481346852" name="python-libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="ef6f9e52a4884739d5b97ce699e5e73521e9150364b198d147066cd0e64d9cd2" name="python-libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="afda15969192fe00f4d49be5ac40d27821e884b313b04a258b72f5310a7fd554" name="python-libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="d4ac29abf67978ad5786d36ecee9994407353dd5e007ca6d4c2dbc2dc7c23eff" name="python-libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="838dfe381a02b95399d2078436bb7d79641e1c3c3bcafe8243690438ea32f9f7" name="python-libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="ae92402b09e377948ce04ef7544eb88cb8e50bce1f2488a198c536f8c684f5e6" name="python-libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="c59ece15c3c537dc8416ec06083ef7c0fb579169cd5af4550fe56639009f72c8" name="python-libteam" arch="i686">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="07a7ac159b15e8ec670ac44b168022b8be46ece44a82a9dc52ad4b8e4d081b5e" name="python-libteam" arch="x86_64">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="ae2fd5bed78f47dfcbdfff6bf8c69a30dbf29b20362b8a56eb016029d4c17471" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.1.1.el7" date="1502798400">- Apply debranding changes</changelog>
</package>
<package pkgid="16701b84d093b5622013701db9557ecb489d695602ac6c91caf96d185b8dcbf0" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7.centos.plus"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.11.1.el7.centos.plus]" date="1512043200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="dea5c2f081149ec792dfdad96be23f0ee22ae8d1cf2d59965b04e98d5601727a" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.1.el7" date="1512043200">- Apply debranding changes</changelog>
</package>
<package pkgid="857f86f3f59e934a2a5ed77699a8ede4ec14514ce84ce41727936dd8ee236ba9" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7.centos.plus"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.11.6.el7.centos.plus]" date="1515672000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="f232dfead0f23c3fe6529a25c059a896bb590d6119c5d3c1c4dcddf5d53386d5" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.6.el7" date="1514980800">- Apply debranding changes</changelog>
</package>
<package pkgid="bb10a9afb361a89b764a6dcca4705a31471c28a331057fa21c91003bb886b875" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="60d6aa8e9f195adeba6ddf3ce2598696f00d88845e790fed70d00a96181e68f1" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="403cb5845fe61c854f20a55f4dde24f32727d29c85e4aca8d394e7715d2dbfbf" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7.centos.plus"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.2.2.el7.centos.plus rc1]" date="1505217600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]</changelog>
  <changelog author="T.Kabe &lt;kabe@&gt; [3.10.0-693.2.2.el7.centos.plus rc2]" date="1505908800">- Add i686 mods (i686-7-4.patch) [bug#13890]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.2.2.el7.centos.plus]" date="1506168000">- Enabled xen
- more i686 mod (firmware-efi-32bit.patch) [ay]</changelog>
</package>
<package pkgid="f558123aae8a1cdf6b8f9ba2970d2927d85bfcc0b473424aa080d158e2a5d965" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="958ef4bd1156276cc52db38e9b90b21c8e37bea2a90498ea18f04987b0b1c4f7" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="16ff249564201add4912783aa324adb1e579f9333da8cfc4d2724d88b8d84c59" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="0791d115fa86912fdb0a3f7321e2c046f7fd80b8d2c4bc6af5ca9a841540a995" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="a47280aba21deaf72f5a923b6189333f42b2cae02eb18934c5bf4315dce277b6" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="3a4dd37c00176ce17acc7816cebb75c1b999d50ffa0dc1867af22d0b9eb84744" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="2f2c8bbdbf619b06088fa51c61efcc0dcc6f9e2e406a5b1e0cbfd69ec4628f7a" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="0ad582c5824a054683c2fdac6b90aadfc486cba72da90dfd9c99e6a9101a473f" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="68be594adc2f3843cebab6bc71e36feadb16ad8efcaefbc6712c5bb85a0db73f" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7.centos.plus"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.5.2.el7.centos.plus]" date="1508414400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="58297292dba971c3d8df15b47d5ae403b057510c0d0d776066c25ef651ad05bf" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.5.2.el7" date="1508414400">- Apply debranding changes</changelog>
</package>
<package pkgid="23942d249dd78983f7866fff72431cd1b8b65d25335ff412aeb991bc694d9fd0" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.1.1.el7" date="1502798400">- Apply debranding changes</changelog>
</package>
<package pkgid="f352909c5232a8ecc27fa6636d931f9a942cc0084e4264fc36253a655048795e" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7.centos.plus"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.11.1.el7.centos.plus]" date="1512043200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="8d5645871a95ba24f5d3d4ca74a5dac734c3678baeb02aca93db1435b81d2100" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.11.1.el7" date="1512043200">- Apply debranding changes</changelog>
</package>
<package pkgid="d7f8c1ba62dcf6de88d2e457788de155b1ccad8794e184249e126edae26f2680" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7.centos.plus"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.11.6.el7.centos.plus]" date="1515672000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="c74ee679abbb7433831cfba4a7885cccecca9c5b06e7656f7de758e8d51a8e26" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.17.1.el7" date="1516881600">- Apply debranding changes</changelog>
</package>
<package pkgid="11cc404c10cd4c94152db4b7f687e4ecaa97d0679b18e52baf7921c9a3e394fd" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.1.el7" date="1504612800">- Apply debranding changes</changelog>
</package>
<package pkgid="2636ad192538d3f0f059b6c6520b77506283ef2730cdcde234272796dc81209c" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7.centos.plus"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.2.2.el7.centos.plus rc1]" date="1505217600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]</changelog>
  <changelog author="T.Kabe &lt;kabe@&gt; [3.10.0-693.2.2.el7.centos.plus rc2]" date="1505908800">- Add i686 mods (i686-7-4.patch) [bug#13890]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.2.2.el7.centos.plus]" date="1506168000">- Enabled xen
- more i686 mod (firmware-efi-32bit.patch) [ay]</changelog>
</package>
<package pkgid="7137fdcde793cd2d0acb29ba2837466c0076fbcfe2785502593f410199525595" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.2.2.el7" date="1505217600">- Apply debranding changes</changelog>
</package>
<package pkgid="a217995e424a59629958aa8f5e95ef7970206f6a229aede6b04485d8780c4cd0" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="37afef19378098a981809b03bfcd93a1761bb0cf6af7259cda8f273a39049f85" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="afdace900bacd7edd0e97710df1d015d4aad33c214a7b6e46bcc9eee8dba3813" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="712ec50da9f8421f84fdad5f7c9e5bc91841dc6bfefe27a5b361cfc99ff68378" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="538f7b3b63d1841c5d294ed652ab7545367daea7986212172f47eda5de9184ed" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="a585f251acac9d550c0e4a7acd25edda734bce38c5c0ca794b14f2a8e2da0d70" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7.centos.plus"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1520337600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a xen patch [bug#14347]
- Add iommu patches [bug#14476]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1521460800">- Rolled in changes for i386 from P.Greco for CONFIG_RETPOLINE</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.21.1.el7.centos.plus]" date="1522411200">- Use a patch (v5) from kabe [bug#14597]</changelog>
</package>
<package pkgid="6b7ae64bd345ce5180a3dc6b4cbd8ea6602bc7ae7fed2fa6ecb0971b93da5b42" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.21.1.el7" date="1520337600">- Apply debranding changes</changelog>
</package>
<package pkgid="8aea8acc9a98e1cc9393c502e3f692d67d2128315da3fe6d925b7bd80184705d" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7.centos.plus"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-693.5.2.el7.centos.plus]" date="1508414400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_4.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch from [bug#13583]
- Add a patch for xen [bug#13763]
- Add a patch from [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]</changelog>
</package>
<package pkgid="fddcecb97ff0d0938c166bb6705400c402268d5b2efd5506abeb8b1fb4d2c59f" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-693.5.2.el7" date="1508414400">- Apply debranding changes</changelog>
</package>
<package pkgid="5d3266dd9134f4571055b0d5cf94e75080ae23cd0db822288e82b32aec2e7a65" name="python-rhsm" arch="i686">
  <version epoch="0" ver="1.19.10" rel="1.el7_4"/>
  <changelog author="Alex Wood &lt;awood@redhat.com&gt; 1.19.1-1" date="1485345600">- Adjust our C bindings for OpenSSL v1.1 API. (awood@redhat.com)
- Make python-rhsm Python-3 compatible (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.2-1" date="1489406400">- 1423443: Handle IndexError during m2crypto request (khowell@redhat.com)
- Move python-rhsm into subdirectory (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.3-1" date="1490961600">- 1435475: Support older versions of M2Crypto (awood@redhat.com)
- 1427069: Prioritize content from Basic entitlements (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.4-1" date="1491825600">- 1438552: Allows releases to be listed through a proxy (csnyder@redhat.com)
- 1420533: Add no_proxy option to API, config, UI (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.5-1" date="1492430400">- 1432990: Better message for bad CA cert (wpoteat@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.6-1" date="1493726400">- 1426343: fixed rct to display cert without subjectAltName.
  (jhnidek@redhat.com)
- Add Update subscriptions pools (tcoufal@redhat.com)
- Add support to list future subscription pools (tcoufal@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.7-1" date="1495627200">- 1443159: Added default value for splay configuration (jhnidek@redhat.com)
- 1451166: Fix Host header when using proxy (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.8-1" date="1496145600">- 1443164: no_proxy match the host name when *.redhat.com is used
  (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.9-1" date="1496836800">- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.10-1" date="1504267200">- 1481384: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
</package>
<package pkgid="ed15fdc83364b2c89452aad0d71afbbbdf2723132f818803715c6637a14e47ac" name="python-rhsm" arch="src">
  <version epoch="0" ver="1.19.10" rel="1.el7_4"/>
  <changelog author="Alex Wood &lt;awood@redhat.com&gt; 1.19.1-1" date="1485345600">- Adjust our C bindings for OpenSSL v1.1 API. (awood@redhat.com)
- Make python-rhsm Python-3 compatible (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.2-1" date="1489406400">- 1423443: Handle IndexError during m2crypto request (khowell@redhat.com)
- Move python-rhsm into subdirectory (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.3-1" date="1490961600">- 1435475: Support older versions of M2Crypto (awood@redhat.com)
- 1427069: Prioritize content from Basic entitlements (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.4-1" date="1491825600">- 1438552: Allows releases to be listed through a proxy (csnyder@redhat.com)
- 1420533: Add no_proxy option to API, config, UI (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.5-1" date="1492430400">- 1432990: Better message for bad CA cert (wpoteat@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.6-1" date="1493726400">- 1426343: fixed rct to display cert without subjectAltName.
  (jhnidek@redhat.com)
- Add Update subscriptions pools (tcoufal@redhat.com)
- Add support to list future subscription pools (tcoufal@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.7-1" date="1495627200">- 1443159: Added default value for splay configuration (jhnidek@redhat.com)
- 1451166: Fix Host header when using proxy (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.8-1" date="1496145600">- 1443164: no_proxy match the host name when *.redhat.com is used
  (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.9-1" date="1496836800">- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.10-1" date="1504267200">- 1481384: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
</package>
<package pkgid="cb5c50432b21760bbcfc4a3fb2281b4003b1b126f811385c9e1f0dc441091043" name="python-rhsm" arch="src">
  <version epoch="0" ver="1.19.10" rel="1.el7_4"/>
  <changelog author="Alex Wood &lt;awood@redhat.com&gt; 1.19.1-1" date="1485345600">- Adjust our C bindings for OpenSSL v1.1 API. (awood@redhat.com)
- Make python-rhsm Python-3 compatible (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.2-1" date="1489406400">- 1423443: Handle IndexError during m2crypto request (khowell@redhat.com)
- Move python-rhsm into subdirectory (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.3-1" date="1490961600">- 1435475: Support older versions of M2Crypto (awood@redhat.com)
- 1427069: Prioritize content from Basic entitlements (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.4-1" date="1491825600">- 1438552: Allows releases to be listed through a proxy (csnyder@redhat.com)
- 1420533: Add no_proxy option to API, config, UI (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.5-1" date="1492430400">- 1432990: Better message for bad CA cert (wpoteat@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.6-1" date="1493726400">- 1426343: fixed rct to display cert without subjectAltName.
  (jhnidek@redhat.com)
- Add Update subscriptions pools (tcoufal@redhat.com)
- Add support to list future subscription pools (tcoufal@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.7-1" date="1495627200">- 1443159: Added default value for splay configuration (jhnidek@redhat.com)
- 1451166: Fix Host header when using proxy (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.8-1" date="1496145600">- 1443164: no_proxy match the host name when *.redhat.com is used
  (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.9-1" date="1496836800">- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.10-1" date="1504267200">- 1481384: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
</package>
<package pkgid="0e56c9afb2c3969fd89e0094887d606c546f40575219e2ecba8027e6585ec9fc" name="python-rhsm" arch="x86_64">
  <version epoch="0" ver="1.19.10" rel="1.el7_4"/>
  <changelog author="Alex Wood &lt;awood@redhat.com&gt; 1.19.1-1" date="1485345600">- Adjust our C bindings for OpenSSL v1.1 API. (awood@redhat.com)
- Make python-rhsm Python-3 compatible (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.2-1" date="1489406400">- 1423443: Handle IndexError during m2crypto request (khowell@redhat.com)
- Move python-rhsm into subdirectory (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.3-1" date="1490961600">- 1435475: Support older versions of M2Crypto (awood@redhat.com)
- 1427069: Prioritize content from Basic entitlements (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.4-1" date="1491825600">- 1438552: Allows releases to be listed through a proxy (csnyder@redhat.com)
- 1420533: Add no_proxy option to API, config, UI (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.5-1" date="1492430400">- 1432990: Better message for bad CA cert (wpoteat@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.6-1" date="1493726400">- 1426343: fixed rct to display cert without subjectAltName.
  (jhnidek@redhat.com)
- Add Update subscriptions pools (tcoufal@redhat.com)
- Add support to list future subscription pools (tcoufal@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.7-1" date="1495627200">- 1443159: Added default value for splay configuration (jhnidek@redhat.com)
- 1451166: Fix Host header when using proxy (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.8-1" date="1496145600">- 1443164: no_proxy match the host name when *.redhat.com is used
  (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.9-1" date="1496836800">- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.10-1" date="1504267200">- 1481384: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
</package>
<package pkgid="5e7580f850bcde720cea693dcaab8d1d7193ae07a54989663501425c0402a870" name="python-rhsm-certificates" arch="i686">
  <version epoch="0" ver="1.19.10" rel="1.el7_4"/>
  <changelog author="Alex Wood &lt;awood@redhat.com&gt; 1.19.1-1" date="1485345600">- Adjust our C bindings for OpenSSL v1.1 API. (awood@redhat.com)
- Make python-rhsm Python-3 compatible (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.2-1" date="1489406400">- 1423443: Handle IndexError during m2crypto request (khowell@redhat.com)
- Move python-rhsm into subdirectory (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.3-1" date="1490961600">- 1435475: Support older versions of M2Crypto (awood@redhat.com)
- 1427069: Prioritize content from Basic entitlements (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.4-1" date="1491825600">- 1438552: Allows releases to be listed through a proxy (csnyder@redhat.com)
- 1420533: Add no_proxy option to API, config, UI (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.5-1" date="1492430400">- 1432990: Better message for bad CA cert (wpoteat@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.6-1" date="1493726400">- 1426343: fixed rct to display cert without subjectAltName.
  (jhnidek@redhat.com)
- Add Update subscriptions pools (tcoufal@redhat.com)
- Add support to list future subscription pools (tcoufal@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.7-1" date="1495627200">- 1443159: Added default value for splay configuration (jhnidek@redhat.com)
- 1451166: Fix Host header when using proxy (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.8-1" date="1496145600">- 1443164: no_proxy match the host name when *.redhat.com is used
  (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.9-1" date="1496836800">- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.10-1" date="1504267200">- 1481384: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
</package>
<package pkgid="3a823ccff955dfd83313c51bb77e2b5642d02b627569f235154586d25cc2df5b" name="python-rhsm-certificates" arch="x86_64">
  <version epoch="0" ver="1.19.10" rel="1.el7_4"/>
  <changelog author="Alex Wood &lt;awood@redhat.com&gt; 1.19.1-1" date="1485345600">- Adjust our C bindings for OpenSSL v1.1 API. (awood@redhat.com)
- Make python-rhsm Python-3 compatible (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.2-1" date="1489406400">- 1423443: Handle IndexError during m2crypto request (khowell@redhat.com)
- Move python-rhsm into subdirectory (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.3-1" date="1490961600">- 1435475: Support older versions of M2Crypto (awood@redhat.com)
- 1427069: Prioritize content from Basic entitlements (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.4-1" date="1491825600">- 1438552: Allows releases to be listed through a proxy (csnyder@redhat.com)
- 1420533: Add no_proxy option to API, config, UI (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.5-1" date="1492430400">- 1432990: Better message for bad CA cert (wpoteat@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.6-1" date="1493726400">- 1426343: fixed rct to display cert without subjectAltName.
  (jhnidek@redhat.com)
- Add Update subscriptions pools (tcoufal@redhat.com)
- Add support to list future subscription pools (tcoufal@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.7-1" date="1495627200">- 1443159: Added default value for splay configuration (jhnidek@redhat.com)
- 1451166: Fix Host header when using proxy (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.8-1" date="1496145600">- 1443164: no_proxy match the host name when *.redhat.com is used
  (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.9-1" date="1496836800">- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.10-1" date="1504267200">- 1481384: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
</package>
<package pkgid="cbfcd42253c992c11d917606455037e1dd60e0c9a4456d620255048364be29f3" name="python-rhsm-debuginfo" arch="i686">
  <version epoch="0" ver="1.19.10" rel="1.el7_4"/>
  <changelog author="Alex Wood &lt;awood@redhat.com&gt; 1.19.1-1" date="1485345600">- Adjust our C bindings for OpenSSL v1.1 API. (awood@redhat.com)
- Make python-rhsm Python-3 compatible (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.2-1" date="1489406400">- 1423443: Handle IndexError during m2crypto request (khowell@redhat.com)
- Move python-rhsm into subdirectory (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.3-1" date="1490961600">- 1435475: Support older versions of M2Crypto (awood@redhat.com)
- 1427069: Prioritize content from Basic entitlements (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.4-1" date="1491825600">- 1438552: Allows releases to be listed through a proxy (csnyder@redhat.com)
- 1420533: Add no_proxy option to API, config, UI (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.5-1" date="1492430400">- 1432990: Better message for bad CA cert (wpoteat@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.6-1" date="1493726400">- 1426343: fixed rct to display cert without subjectAltName.
  (jhnidek@redhat.com)
- Add Update subscriptions pools (tcoufal@redhat.com)
- Add support to list future subscription pools (tcoufal@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.7-1" date="1495627200">- 1443159: Added default value for splay configuration (jhnidek@redhat.com)
- 1451166: Fix Host header when using proxy (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.8-1" date="1496145600">- 1443164: no_proxy match the host name when *.redhat.com is used
  (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.9-1" date="1496836800">- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.10-1" date="1504267200">- 1481384: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
</package>
<package pkgid="1b850914e7e3a5e024e58c874c398e1df253513ec975d76f2c2adc6a5038344f" name="python-rhsm-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.19.10" rel="1.el7_4"/>
  <changelog author="Alex Wood &lt;awood@redhat.com&gt; 1.19.1-1" date="1485345600">- Adjust our C bindings for OpenSSL v1.1 API. (awood@redhat.com)
- Make python-rhsm Python-3 compatible (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.2-1" date="1489406400">- 1423443: Handle IndexError during m2crypto request (khowell@redhat.com)
- Move python-rhsm into subdirectory (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.3-1" date="1490961600">- 1435475: Support older versions of M2Crypto (awood@redhat.com)
- 1427069: Prioritize content from Basic entitlements (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.4-1" date="1491825600">- 1438552: Allows releases to be listed through a proxy (csnyder@redhat.com)
- 1420533: Add no_proxy option to API, config, UI (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.5-1" date="1492430400">- 1432990: Better message for bad CA cert (wpoteat@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.6-1" date="1493726400">- 1426343: fixed rct to display cert without subjectAltName.
  (jhnidek@redhat.com)
- Add Update subscriptions pools (tcoufal@redhat.com)
- Add support to list future subscription pools (tcoufal@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.7-1" date="1495627200">- 1443159: Added default value for splay configuration (jhnidek@redhat.com)
- 1451166: Fix Host header when using proxy (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.8-1" date="1496145600">- 1443164: no_proxy match the host name when *.redhat.com is used
  (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.9-1" date="1496836800">- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.10-1" date="1504267200">- 1481384: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
</package>
<package pkgid="8c626ddbd5603e1e4f39dd8e3df3bcb6f28833442ed4b9243464c57d2a41d09b" name="python-sss" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="046c6e4afb3b31773daed5a2a41e910ce8b10ea55b4bc7c340af5a3652073ae9" name="python-sss" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="677fd35aa2c3e50988e238c4d143171c86d8dca57fc1beba8d4081efd2bcf43c" name="python-sss" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="2d8e654f19080d99a6b32a5c77baa5db4864c7a749101328bc1feab3c0dfaf24" name="python-sss" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="d62830af10f7e0ac66481db81df16088bd36543389b58ffde7f350062e4084fe" name="python-sss" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="e15a646d8e8d559e3d138bf06dff4dff7cdb80ee7dc70beec3e58b161f072cb7" name="python-sss" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="5efc40b86a89d5a2216311d4874c20936e177fe062e326eddcd7e9ddb8ea8c72" name="python-sss" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="2cc42b72951009475c335dfeba4b84aeffbb50e9c1d5b18cdef8e396c049ee0d" name="python-sss" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="8f9746e248edc179010dfa34a19870dffdf405fe793fecd7f418ffd5d42621e1" name="python-sss-murmur" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="5ab3cc338b0a934acc9642df696fa5a5bf2b55c3d96dce5af1521560ab937a42" name="python-sss-murmur" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="5b42a8996ab96d0ad7430cbc66a37cc1383fcb0dba5a2ed3ae5f8f2f615e3500" name="python-sss-murmur" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="0b72c58dc7cd356b74f58b4ecac2a2c1645c22a95422365e8ab901d8842a1404" name="python-sss-murmur" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="fd2fd68726956fa701813677412fdbc0c35d4010e678ed0e834345ba77944a6a" name="python-sss-murmur" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="a5776d8b496c6f01b67dc8e23b0d792e37a8a42c98972ae9d0602cf2b60bffa0" name="python-sss-murmur" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="61a515befb7fd4f88af404247ecb2681d388a150eeabbcbffe478fae757a75e4" name="python-sss-murmur" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="23cb6a47f0a5057fe3f38f2a95fb171dae92f607891511b3ad6ba072087f5f52" name="python-sss-murmur" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="b4e39dc7174a55d870ea45dc5c22ec3c2503d0ed1176a9348b8a4c7b6ad3ae51" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="cdda289692f53d487d6a35753553cd401ddfa45676589003818067b695241f16" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="d50eb923e0a440f2d21888391aa03df3927e6aa93e4098a3caff6670b917571d" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="800135725dafeba19566af684538d2118d2330b32b0a88cefd0c29fd9280f2d7" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="f835bd39f45e75f6f8da6d9fb458ec5da416bd3133b3fe8b6668b109c23fbe47" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="00a0091e1f556c4fcd820c5891a76a416ab9964803874217dc91dadf4ee6e9d9" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="f841b29102b268fadb0ee758585084b8e16024509b8e35acbd0cea29bbc3322c" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="9510b8ca17a577d7f1feaf42216591459e77267ad826befe935aff7db175c1da" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="a73f76130fa35d7b90cd884374cbddfbdc3137a80ac666267ef76a49432bdbdc" name="python-tevent" arch="i686">
  <version epoch="0" ver="0.9.31" rel="2.el7_4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-1" date="1409832000">- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer
- removes upstreamed patches</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-2" date="1416830400">- Allow building with RHEL-7.0 libtalloc
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-3" date="1416830401">- BuildRequire the minimal applicable libtalloc version
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.24-1" date="1433332800">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.25-1" date="1434283200">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-1" date="1459512000">- Rebase libtevent to 0.9.26
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-2" date="1459771200">- Resolves: #1309439 - libtevent leaks memory during signal handling</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.28-1" date="1465473600">- Resolves: #1320247 - Rebase libtevent to version 0.9.28</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-1" date="1487073600">- Resolves: #1393812 - Rebase libtevent in RHEL-7.4 to version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-2" date="1487073601">- Resolves: #1513984 - tevent can cause a Samba file corruption bug under
                       heavy threaded load [rhel-7.4.z]</changelog>
</package>
<package pkgid="890dbb7420b694a56abf9363675303cccfb79635f156c9aebbf5ee4cfa3681fb" name="python-tevent" arch="x86_64">
  <version epoch="0" ver="0.9.31" rel="2.el7_4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-1" date="1409832000">- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer
- removes upstreamed patches</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-2" date="1416830400">- Allow building with RHEL-7.0 libtalloc
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-3" date="1416830401">- BuildRequire the minimal applicable libtalloc version
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.24-1" date="1433332800">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.25-1" date="1434283200">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-1" date="1459512000">- Rebase libtevent to 0.9.26
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-2" date="1459771200">- Resolves: #1309439 - libtevent leaks memory during signal handling</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.28-1" date="1465473600">- Resolves: #1320247 - Rebase libtevent to version 0.9.28</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-1" date="1487073600">- Resolves: #1393812 - Rebase libtevent in RHEL-7.4 to version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-2" date="1487073601">- Resolves: #1513984 - tevent can cause a Samba file corruption bug under
                       heavy threaded load [rhel-7.4.z]</changelog>
</package>
<package pkgid="9b42bae5f2a413a1761d9905820e0a764360b90b65a32d2167f041417560446e" name="python2-cryptography" arch="i686">
  <version epoch="0" ver="1.7.2" rel="1.el7_4.1"/>
  <changelog author="Robert Kuska &lt;rkuska@redhat.com&gt; - 1.0.2-2" date="1446638400">- Rebuilt for Python3.5 rebuild</changelog>
  <changelog author="Robert Kuska &lt;rkuska@redhat.com&gt; - 1.1-1" date="1447243200">- Update to v1.1</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.2.1-1" date="1452340800">- Update to v1.2.1</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.2.1-2" date="1452513600">- Move python-cryptograph =&gt; python2-cryptography</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-3" date="1454587200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.3.1-1" date="1462276800">- Update to v1.3.1</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.3.1-2" date="1462881600">- Make it easier to build on EL7</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.3.1-3" date="1462881601">- Remove versioned setuptools dependency</changelog>
  <changelog author="Christian Heimes &lt;cheimes@redhat.com&gt; - 1.7.2-1" date="1487073600">- Update to 1.7.2
- Disable pytest.deprecated_call() tests
- Remove versioned pytest
- Add build requirements pytz</changelog>
  <changelog author="Christian Heimes &lt;cheimes@redhat.com&gt; - 1.7.2-1.1" date="1502712000">- Ignore errors on OpenSSL's error stack when initializing, fixes RHBZ#1485896
- Fix parsing of long OIDs, fixes RHBZ#1485898</changelog>
</package>
<package pkgid="a110c15ff1840f5c784a82879b8a18c1aecf2d02efbf36b74516a3a2e9804468" name="python2-cryptography" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="1.el7_4.1"/>
  <changelog author="Robert Kuska &lt;rkuska@redhat.com&gt; - 1.0.2-2" date="1446638400">- Rebuilt for Python3.5 rebuild</changelog>
  <changelog author="Robert Kuska &lt;rkuska@redhat.com&gt; - 1.1-1" date="1447243200">- Update to v1.1</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.2.1-1" date="1452340800">- Update to v1.2.1</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.2.1-2" date="1452513600">- Move python-cryptograph =&gt; python2-cryptography</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-3" date="1454587200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.3.1-1" date="1462276800">- Update to v1.3.1</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.3.1-2" date="1462881600">- Make it easier to build on EL7</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.3.1-3" date="1462881601">- Remove versioned setuptools dependency</changelog>
  <changelog author="Christian Heimes &lt;cheimes@redhat.com&gt; - 1.7.2-1" date="1487073600">- Update to 1.7.2
- Disable pytest.deprecated_call() tests
- Remove versioned pytest
- Add build requirements pytz</changelog>
  <changelog author="Christian Heimes &lt;cheimes@redhat.com&gt; - 1.7.2-1.1" date="1502712000">- Ignore errors on OpenSSL's error stack when initializing, fixes RHBZ#1485896
- Fix parsing of long OIDs, fixes RHBZ#1485898</changelog>
</package>
<package pkgid="10d43a10fb209aa947326706efbd1fa2c3495f219ba4fb98aa6fbdc2d95c69d0" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504612800">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504699200">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="738da2b14bb9fbe02ed70bf26d704f77ff4c278ca69884eecf9345893a625878" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504612800">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504699200">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="b16c2d2dfe026306937d50aac79015befe68927cf2ea5c730413cc734ef9b377" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414400">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414401">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="87abc06ea0e90bcaaa9da1f1fa545e1855930be5e634db329b4bba20090e99b4" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414400">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414401">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="471643d16004021670a1d9c345edc0a1f6ace64a1032a4dbfa37a86176bb8e6c" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-13.el7" date="1495108800">- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
  error observed during ipa upgrade with latest package. 
  - ipa-server-install: fix uninstall
- Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
  replica 
  - ca install: merge duplicated code for DM password
  - installutils: add DM password validator
  - ca, kra install: validate DM password</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-14.el7" date="1495627200">- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
  handle PKINIT certificates/anchors
  - certdb: add named trust flag constants
  - certdb, certs: make trust flags argument mandatory
  - certdb: use custom object for trust flags
  - install: trust IPA CA for PKINIT
  - client install: fix client PKINIT configuration
  - install: introduce generic Kerberos Augeas lens
  - server install: fix KDC PKINIT configuration
  - ipapython.ipautil.run: Add option to set umask before executing command
  - certs: do not export keys world-readable in install_key_from_p12
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
  - replica install: respect --pkinit-cert-file
  - cacert manage: support PKINIT
  - server certinstall: support PKINIT
- Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
  option
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
- Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
  decommissioned
  - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
- Resolves: #1451712 KRA installation fails on server that was originally
  installed as CA-less
  - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
- Resolves: #1441499 ipa cert-show does not raise error if no file name
  specified
  - ca/cert-show: check certificate_out in options
- Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
  - Remove pkinit-anonymous command
- Resolves: #1449523 Provide an API command to retrieve PKINIT status
  in the FreeIPA topology
  - Allow for multivalued server attributes
  - Refactor the role/attribute member reporting code
  - Add an attribute reporting client PKINIT-capable servers
  - Add the list of PKINIT servers as a virtual attribute to global config
  - Add `pkinit-status` command
  - test_serverroles: Get rid of MockLDAP and use ldap2 instead
- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
  - Fix rare race condition with missing ccache file
- Resolves: #1455045 Simple service uninstallers must be able to handle
  missing service files gracefully
  - only stop/disable simple service if it is installed
- Resolves: #1455541 after upgrade login from web ui breaks
  - krb5: make sure KDC certificate is readable
- Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
  command "ipa cert-request --add" after upgrade
  - Change python-cryptography to python2-cryptography</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos" date="1501502400">- Roll in CentOS Branding
- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="6a6fea9c12d08eb38066f060c2e567419f82ead8335c5d2003ecc51718b39b75" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-13.el7" date="1495108800">- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
  error observed during ipa upgrade with latest package. 
  - ipa-server-install: fix uninstall
- Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
  replica 
  - ca install: merge duplicated code for DM password
  - installutils: add DM password validator
  - ca, kra install: validate DM password</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-14.el7" date="1495627200">- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
  handle PKINIT certificates/anchors
  - certdb: add named trust flag constants
  - certdb, certs: make trust flags argument mandatory
  - certdb: use custom object for trust flags
  - install: trust IPA CA for PKINIT
  - client install: fix client PKINIT configuration
  - install: introduce generic Kerberos Augeas lens
  - server install: fix KDC PKINIT configuration
  - ipapython.ipautil.run: Add option to set umask before executing command
  - certs: do not export keys world-readable in install_key_from_p12
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
  - replica install: respect --pkinit-cert-file
  - cacert manage: support PKINIT
  - server certinstall: support PKINIT
- Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
  option
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
- Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
  decommissioned
  - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
- Resolves: #1451712 KRA installation fails on server that was originally
  installed as CA-less
  - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
- Resolves: #1441499 ipa cert-show does not raise error if no file name
  specified
  - ca/cert-show: check certificate_out in options
- Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
  - Remove pkinit-anonymous command
- Resolves: #1449523 Provide an API command to retrieve PKINIT status
  in the FreeIPA topology
  - Allow for multivalued server attributes
  - Refactor the role/attribute member reporting code
  - Add an attribute reporting client PKINIT-capable servers
  - Add the list of PKINIT servers as a virtual attribute to global config
  - Add `pkinit-status` command
  - test_serverroles: Get rid of MockLDAP and use ldap2 instead
- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
  - Fix rare race condition with missing ccache file
- Resolves: #1455045 Simple service uninstallers must be able to handle
  missing service files gracefully
  - only stop/disable simple service if it is installed
- Resolves: #1455541 after upgrade login from web ui breaks
  - krb5: make sure KDC certificate is readable
- Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
  command "ipa cert-request --add" after upgrade
  - Change python-cryptography to python2-cryptography</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos" date="1501502400">- Roll in CentOS Branding
- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="2a66b3234d5f99914ed0c4d70d34ef5f73ad32305fb6ac06c3f29dc7452127f7" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="22.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043200">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043201">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="b1a0d5b0a6299707bbd355e9cce4a2076216fae8aae4f13e66e3ef6580326d2e" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="22.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043200">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043201">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="1bcaf4d7c0ae9af583b1494ca25ea0fe821d7c8e274a717a0fec1fb2340087ea" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504612800">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504699200">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="314f08cc57125d0fd50a32d903de00138b4d34f560d5009895e7c9efc6b0da32" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504612800">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504699200">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="eb318ed3af93035ee7959dab14759ae044f9b05d9d3e437b38487ca133d15692" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414400">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414401">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="fbe8dade955f5711cc8b96661e9a21070049725223471b7bac5717c1ab01ae95" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414400">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414401">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="b447e9aa8adb095d46c1b27f5101f713fb18ee319a3ed4b5544512b3f44388b6" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-13.el7" date="1495108800">- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
  error observed during ipa upgrade with latest package. 
  - ipa-server-install: fix uninstall
- Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
  replica 
  - ca install: merge duplicated code for DM password
  - installutils: add DM password validator
  - ca, kra install: validate DM password</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-14.el7" date="1495627200">- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
  handle PKINIT certificates/anchors
  - certdb: add named trust flag constants
  - certdb, certs: make trust flags argument mandatory
  - certdb: use custom object for trust flags
  - install: trust IPA CA for PKINIT
  - client install: fix client PKINIT configuration
  - install: introduce generic Kerberos Augeas lens
  - server install: fix KDC PKINIT configuration
  - ipapython.ipautil.run: Add option to set umask before executing command
  - certs: do not export keys world-readable in install_key_from_p12
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
  - replica install: respect --pkinit-cert-file
  - cacert manage: support PKINIT
  - server certinstall: support PKINIT
- Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
  option
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
- Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
  decommissioned
  - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
- Resolves: #1451712 KRA installation fails on server that was originally
  installed as CA-less
  - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
- Resolves: #1441499 ipa cert-show does not raise error if no file name
  specified
  - ca/cert-show: check certificate_out in options
- Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
  - Remove pkinit-anonymous command
- Resolves: #1449523 Provide an API command to retrieve PKINIT status
  in the FreeIPA topology
  - Allow for multivalued server attributes
  - Refactor the role/attribute member reporting code
  - Add an attribute reporting client PKINIT-capable servers
  - Add the list of PKINIT servers as a virtual attribute to global config
  - Add `pkinit-status` command
  - test_serverroles: Get rid of MockLDAP and use ldap2 instead
- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
  - Fix rare race condition with missing ccache file
- Resolves: #1455045 Simple service uninstallers must be able to handle
  missing service files gracefully
  - only stop/disable simple service if it is installed
- Resolves: #1455541 after upgrade login from web ui breaks
  - krb5: make sure KDC certificate is readable
- Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
  command "ipa cert-request --add" after upgrade
  - Change python-cryptography to python2-cryptography</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos" date="1501502400">- Roll in CentOS Branding
- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="be1a1c1600d676bd87e76df39485b15e10812db0c0c32f22566bd6d479f27523" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-13.el7" date="1495108800">- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
  error observed during ipa upgrade with latest package. 
  - ipa-server-install: fix uninstall
- Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
  replica 
  - ca install: merge duplicated code for DM password
  - installutils: add DM password validator
  - ca, kra install: validate DM password</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-14.el7" date="1495627200">- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
  handle PKINIT certificates/anchors
  - certdb: add named trust flag constants
  - certdb, certs: make trust flags argument mandatory
  - certdb: use custom object for trust flags
  - install: trust IPA CA for PKINIT
  - client install: fix client PKINIT configuration
  - install: introduce generic Kerberos Augeas lens
  - server install: fix KDC PKINIT configuration
  - ipapython.ipautil.run: Add option to set umask before executing command
  - certs: do not export keys world-readable in install_key_from_p12
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
  - replica install: respect --pkinit-cert-file
  - cacert manage: support PKINIT
  - server certinstall: support PKINIT
- Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
  option
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
- Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
  decommissioned
  - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
- Resolves: #1451712 KRA installation fails on server that was originally
  installed as CA-less
  - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
- Resolves: #1441499 ipa cert-show does not raise error if no file name
  specified
  - ca/cert-show: check certificate_out in options
- Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
  - Remove pkinit-anonymous command
- Resolves: #1449523 Provide an API command to retrieve PKINIT status
  in the FreeIPA topology
  - Allow for multivalued server attributes
  - Refactor the role/attribute member reporting code
  - Add an attribute reporting client PKINIT-capable servers
  - Add the list of PKINIT servers as a virtual attribute to global config
  - Add `pkinit-status` command
  - test_serverroles: Get rid of MockLDAP and use ldap2 instead
- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
  - Fix rare race condition with missing ccache file
- Resolves: #1455045 Simple service uninstallers must be able to handle
  missing service files gracefully
  - only stop/disable simple service if it is installed
- Resolves: #1455541 after upgrade login from web ui breaks
  - krb5: make sure KDC certificate is readable
- Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
  command "ipa cert-request --add" after upgrade
  - Change python-cryptography to python2-cryptography</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos" date="1501502400">- Roll in CentOS Branding
- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="ac3aea3eb7fa0ba88860c7045bcb5b73aaf9278e6e181d9603979d44a98c27d8" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="22.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043200">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043201">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="65102b7e05a055dd0f0b356515e4dc43fe24574fde39d835b58a929c2dae9021" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="22.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043200">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043201">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="032e48d89350f1a5c8761294b2c24fac5b80b604797e6b7dee663f19d2debfea" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504612800">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504699200">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="a416a7e2d0fab444c8c4bb8e029ff3cbc880a986547c7ec98383d3a8dc6c21a0" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504612800">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.1.2" date="1504699200">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="c267b8ccbd0c8f9133670de1d2acae727da5685c1d8a24eafda8aae0afa05697" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414400">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414401">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="f8b7a656b1359b5daeb5ddc404ad05a436db5ca45819873273f82c6f7331e59a" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414400">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-21.el7.centos.2.2" date="1508414401">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="7daba85f2cdb6e0aa2ac554b694a6c85229b92ad98933759368f13684752cf36" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-13.el7" date="1495108800">- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
  error observed during ipa upgrade with latest package. 
  - ipa-server-install: fix uninstall
- Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
  replica 
  - ca install: merge duplicated code for DM password
  - installutils: add DM password validator
  - ca, kra install: validate DM password</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-14.el7" date="1495627200">- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
  handle PKINIT certificates/anchors
  - certdb: add named trust flag constants
  - certdb, certs: make trust flags argument mandatory
  - certdb: use custom object for trust flags
  - install: trust IPA CA for PKINIT
  - client install: fix client PKINIT configuration
  - install: introduce generic Kerberos Augeas lens
  - server install: fix KDC PKINIT configuration
  - ipapython.ipautil.run: Add option to set umask before executing command
  - certs: do not export keys world-readable in install_key_from_p12
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
  - replica install: respect --pkinit-cert-file
  - cacert manage: support PKINIT
  - server certinstall: support PKINIT
- Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
  option
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
- Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
  decommissioned
  - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
- Resolves: #1451712 KRA installation fails on server that was originally
  installed as CA-less
  - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
- Resolves: #1441499 ipa cert-show does not raise error if no file name
  specified
  - ca/cert-show: check certificate_out in options
- Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
  - Remove pkinit-anonymous command
- Resolves: #1449523 Provide an API command to retrieve PKINIT status
  in the FreeIPA topology
  - Allow for multivalued server attributes
  - Refactor the role/attribute member reporting code
  - Add an attribute reporting client PKINIT-capable servers
  - Add the list of PKINIT servers as a virtual attribute to global config
  - Add `pkinit-status` command
  - test_serverroles: Get rid of MockLDAP and use ldap2 instead
- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
  - Fix rare race condition with missing ccache file
- Resolves: #1455045 Simple service uninstallers must be able to handle
  missing service files gracefully
  - only stop/disable simple service if it is installed
- Resolves: #1455541 after upgrade login from web ui breaks
  - krb5: make sure KDC certificate is readable
- Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
  command "ipa cert-request --add" after upgrade
  - Change python-cryptography to python2-cryptography</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos" date="1501502400">- Roll in CentOS Branding
- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="c178b8035a3ae4957afcc4e1e863061276b83cc33433c7a7afb1aa28fc0563c3" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="21.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-13.el7" date="1495108800">- Resolves: #1451804 "AttributeError: 'tuple' object has no attribute 'append'"
  error observed during ipa upgrade with latest package. 
  - ipa-server-install: fix uninstall
- Resolves: #1445390 ipa-[ca|kra]-install with invalid DM password break
  replica 
  - ca install: merge duplicated code for DM password
  - installutils: add DM password validator
  - ca, kra install: validate DM password</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-14.el7" date="1495627200">- Resolves: #1438731 Extend ipa-server-certinstall and ipa-certupdate to 
  handle PKINIT certificates/anchors
  - certdb: add named trust flag constants
  - certdb, certs: make trust flags argument mandatory
  - certdb: use custom object for trust flags
  - install: trust IPA CA for PKINIT
  - client install: fix client PKINIT configuration
  - install: introduce generic Kerberos Augeas lens
  - server install: fix KDC PKINIT configuration
  - ipapython.ipautil.run: Add option to set umask before executing command
  - certs: do not export keys world-readable in install_key_from_p12
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
  - replica install: respect --pkinit-cert-file
  - cacert manage: support PKINIT
  - server certinstall: support PKINIT
- Resolves: #1444432 CA-less pkinit not installable with --pkinit-cert-file
  option
  - certs: do not export CA certs in install_pem_from_p12
  - server install: fix KDC certificate validation in CA-less
- Resolves: #1451228 ipa-kra-install fails when primary KRA server has been
  decommissioned
  - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 
- Resolves: #1451712 KRA installation fails on server that was originally
  installed as CA-less
  - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt
- Resolves: #1441499 ipa cert-show does not raise error if no file name
  specified
  - ca/cert-show: check certificate_out in options
- Resolves: #1449522 Deprecate `ipa pkinit-anonymous` command in FreeIPA 4.5+
  - Remove pkinit-anonymous command
- Resolves: #1449523 Provide an API command to retrieve PKINIT status
  in the FreeIPA topology
  - Allow for multivalued server attributes
  - Refactor the role/attribute member reporting code
  - Add an attribute reporting client PKINIT-capable servers
  - Add the list of PKINIT servers as a virtual attribute to global config
  - Add `pkinit-status` command
  - test_serverroles: Get rid of MockLDAP and use ldap2 instead
- Resolves: #1452216 Replica installation grants HTTP principal access in WebUI
  - Fix rare race condition with missing ccache file
- Resolves: #1455045 Simple service uninstallers must be able to handle
  missing service files gracefully
  - only stop/disable simple service if it is installed
- Resolves: #1455541 after upgrade login from web ui breaks
  - krb5: make sure KDC certificate is readable
- Resolves: #1455862 "ipa: ERROR: an internal error has occurred" on executing
  command "ipa cert-request --add" after upgrade
  - Change python-cryptography to python2-cryptography</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-21.el7.centos" date="1501502400">- Roll in CentOS Branding
- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="4fccc7d395e64f90437660a24a830536f263b87a816682be2b549ffac30bf739" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="22.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043200">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043201">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="18492315b17bb6a6500792744001fa65632823ca06c34c2cd8f91bfeab732079" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.5.0" rel="22.el7.centos"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043200">- Roll in CentOS Branding</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 4.5.0-22.el7.centos" date="1512043201">- set ipaplatform to rhel for compatibilty for updates</changelog>
</package>
<package pkgid="e97de09051e4302df2fc39c35f26fc10fb197e0eb66c6d8073b291dd85435fa9" name="qemu-img" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-133.el7" date="1489060800">- kvm-target-i386-add-Ivy-Bridge-CPU-model.patch [bz#1368375]
- kvm-x86-add-AVX512_4VNNIW-and-AVX512_4FMAPS-features.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Kill-unused-code.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-level.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-CPU-v.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-xleve.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Set-all-feature-words-.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Fill-feature-words-in-.patch [bz#1382122]
- kvm-target-i386-kvm_check_features_against_host-Kill-fea.patch [bz#1382122]
- kvm-target-i386-Make-TCG-feature-filtering-more-readable.patch [bz#1382122]
- kvm-target-i386-Filter-FEAT_7_0_EBX-TCG-features-too.patch [bz#1382122]
- kvm-target-i386-Filter-KVM-and-0xC0000001-features-on-TC.patch [bz#1382122]
- kvm-target-i386-Define-TCG_-_FEATURES-earlier-in-cpu.c.patch [bz#1382122]
- kvm-target-i386-Loop-based-copying-and-setting-unsetting.patch [bz#1382122]
- kvm-target-i386-Loop-based-feature-word-filtering-in-TCG.patch [bz#1382122]
- kvm-spice-remove-spice-experimental.h-include.patch [bz#1430606]
- kvm-spice-replace-use-of-deprecated-API.patch [bz#1430606]
- Resolves: bz#1368375
  ([Intel 7.4 Bug] qemu-kvm does not support “-cpu IvyBridge”)
- Resolves: bz#1382122
  ([Intel 7.4 FEAT] KVM Enable the avx512_4vnniw, avx512_4fmaps instructions in qemu)
- Resolves: bz#1430606
  (Can't build qemu-kvm with newer spice packages)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-134.el7" date="1490097600">- kvm-ui-vnc-introduce-VNC_DIRTY_PIXELS_PER_BIT-macro.patch [bz#1377977]
- kvm-ui-vnc-derive-cmp_bytes-from-VNC_DIRTY_PIXELS_PER_BI.patch [bz#1377977]
- kvm-ui-vnc-optimize-dirty-bitmap-tracking.patch [bz#1377977]
- kvm-ui-vnc-optimize-setting-in-vnc_dpy_update.patch [bz#1377977]
- kvm-ui-vnc-fix-vmware-VGA-incompatiblities.patch [bz#1377977]
- kvm-ui-vnc-fix-potential-memory-corruption-issues.patch [bz#1377977]
- kvm-vnc-fix-memory-corruption-CVE-2015-5225.patch [bz#1377977]
- kvm-vnc-fix-overflow-in-vnc_update_stats.patch [bz#1377977]
- kvm-i386-kvmvapic-initialise-imm32-variable.patch [bz#1335751]
- kvm-qemu-iotests-Filter-out-actual-image-size-in-067.patch [bz#1427176]
- vm-qcow2-Don-t-rely-on-free_cluster_index-in-alloc_ref2.patch [bz#1427176]
- kvm-qemu-iotests-Fix-core-dump-suppression-in-test-039.patch [bz#1427176]
- kvm-qemu-io-Add-sigraise-command.patch [bz#1427176]
- kvm-iotests-Filter-for-Killed-in-qemu-io-output.patch [bz#1427176]
- kvm-iotests-Fix-test-039.patch [bz#1427176]
- kvm-blkdebug-Add-bdrv_truncate.patch [bz#1427176]
- kvm-vhdx-Fix-zero-fill-iov-length.patch [bz#1427176]
- kvm-qemu-iotests-Disable-030-040-041.patch [bz#1427176]
- kvm-x86-add-AVX512_VPOPCNTDQ-features.patch [bz#1415830]
- kvm-usb-ccid-check-ccid-apdu-length.patch [bz#1419818]
- kvm-usb-ccid-better-bulk_out-error-handling.patch [bz#1419818]
- kvm-usb-ccid-move-header-size-check.patch [bz#1419818]
- kvm-usb-ccid-add-check-message-size-checks.patch [bz#1419818]
- kvm-spec-Update-rdma-build-dependency.patch [bz#1433920]
- Resolves: bz#1335751
  (CVE-2016-4020 qemu-kvm: Qemu: i386: leakage of stack memory to guest in kvmvapic.c [rhel-7.4])
- Resolves: bz#1377977
  (qemu-kvm coredump in vnc_raw_send_framebuffer_update [rhel-7.4])
- Resolves: bz#1415830
  ([Intel 7.4 FEAT] Enable vpopcntdq for KNM - qemu/kvm)
- Resolves: bz#1419818
  (CVE-2017-5898 qemu-kvm: Qemu: usb: integer overflow in emulated_apdu_from_guest [rhel-7.4])
- Resolves: bz#1427176
  (test cases of qemu-iotests failed)
- Resolves: bz#1433920
  (Switch from librdmacm-devel to rdma-core-devel)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-135.el7" date="1490875200">- kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1430060]
- kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1430060]
- kvm-cirrus-add-option-to-disable-blitter.patch [bz#1430060]
- kvm-cirrus-fix-cirrus_invalidate_region.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1430060]
- Resolves: bz#1430060
  (CVE-2016-9603 qemu-kvm: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-7.4])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
</package>
<package pkgid="af25645b0b70f347d203b19825e3ac974702ea9e8975823d5058e89dee701122" name="qemu-img" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-134.el7" date="1490097600">- kvm-ui-vnc-introduce-VNC_DIRTY_PIXELS_PER_BIT-macro.patch [bz#1377977]
- kvm-ui-vnc-derive-cmp_bytes-from-VNC_DIRTY_PIXELS_PER_BI.patch [bz#1377977]
- kvm-ui-vnc-optimize-dirty-bitmap-tracking.patch [bz#1377977]
- kvm-ui-vnc-optimize-setting-in-vnc_dpy_update.patch [bz#1377977]
- kvm-ui-vnc-fix-vmware-VGA-incompatiblities.patch [bz#1377977]
- kvm-ui-vnc-fix-potential-memory-corruption-issues.patch [bz#1377977]
- kvm-vnc-fix-memory-corruption-CVE-2015-5225.patch [bz#1377977]
- kvm-vnc-fix-overflow-in-vnc_update_stats.patch [bz#1377977]
- kvm-i386-kvmvapic-initialise-imm32-variable.patch [bz#1335751]
- kvm-qemu-iotests-Filter-out-actual-image-size-in-067.patch [bz#1427176]
- vm-qcow2-Don-t-rely-on-free_cluster_index-in-alloc_ref2.patch [bz#1427176]
- kvm-qemu-iotests-Fix-core-dump-suppression-in-test-039.patch [bz#1427176]
- kvm-qemu-io-Add-sigraise-command.patch [bz#1427176]
- kvm-iotests-Filter-for-Killed-in-qemu-io-output.patch [bz#1427176]
- kvm-iotests-Fix-test-039.patch [bz#1427176]
- kvm-blkdebug-Add-bdrv_truncate.patch [bz#1427176]
- kvm-vhdx-Fix-zero-fill-iov-length.patch [bz#1427176]
- kvm-qemu-iotests-Disable-030-040-041.patch [bz#1427176]
- kvm-x86-add-AVX512_VPOPCNTDQ-features.patch [bz#1415830]
- kvm-usb-ccid-check-ccid-apdu-length.patch [bz#1419818]
- kvm-usb-ccid-better-bulk_out-error-handling.patch [bz#1419818]
- kvm-usb-ccid-move-header-size-check.patch [bz#1419818]
- kvm-usb-ccid-add-check-message-size-checks.patch [bz#1419818]
- kvm-spec-Update-rdma-build-dependency.patch [bz#1433920]
- Resolves: bz#1335751
  (CVE-2016-4020 qemu-kvm: Qemu: i386: leakage of stack memory to guest in kvmvapic.c [rhel-7.4])
- Resolves: bz#1377977
  (qemu-kvm coredump in vnc_raw_send_framebuffer_update [rhel-7.4])
- Resolves: bz#1415830
  ([Intel 7.4 FEAT] Enable vpopcntdq for KNM - qemu/kvm)
- Resolves: bz#1419818
  (CVE-2017-5898 qemu-kvm: Qemu: usb: integer overflow in emulated_apdu_from_guest [rhel-7.4])
- Resolves: bz#1427176
  (test cases of qemu-iotests failed)
- Resolves: bz#1433920
  (Switch from librdmacm-devel to rdma-core-devel)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-135.el7" date="1490875200">- kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1430060]
- kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1430060]
- kvm-cirrus-add-option-to-disable-blitter.patch [bz#1430060]
- kvm-cirrus-fix-cirrus_invalidate_region.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1430060]
- Resolves: bz#1430060
  (CVE-2016-9603 qemu-kvm: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-7.4])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
</package>
<package pkgid="5df39741a067bcfdf5f3d7f598f2007a55631235d229629b709b16f56f9d8716" name="qemu-img" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
</package>
<package pkgid="da4d5690abcc837ace0ba8411d56489a0e786d7c4e4ce920c3981fb4269e573e" name="qemu-img" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.5"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.5" date="1511956800">- kvm-vfio-pci-Only-mmap-TARGET_PAGE_SIZE-regions.patch [bz#1515110]
- Resolves: bz#1515110
  (Regression in QEMU handling for sub-page MMIO BARs for vfio-pci devices [rhel-7.4.z])</changelog>
</package>
<package pkgid="cc99e54cccf0c5697542f93f3ac2a3569a6a6c0204c6f4fc686820770e152da8" name="qemu-img" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.5" date="1511956800">- kvm-vfio-pci-Only-mmap-TARGET_PAGE_SIZE-regions.patch [bz#1515110]
- Resolves: bz#1515110
  (Regression in QEMU handling for sub-page MMIO BARs for vfio-pci devices [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.6" date="1513252800">- Fix CVE-2017-5715</changelog>
</package>
<package pkgid="5a556aea6414d46a560c1073485f166269e5909720946959a8453c87900a96e1" name="qemu-img" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.5" date="1511956800">- kvm-vfio-pci-Only-mmap-TARGET_PAGE_SIZE-regions.patch [bz#1515110]
- Resolves: bz#1515110
  (Regression in QEMU handling for sub-page MMIO BARs for vfio-pci devices [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.6" date="1513252800">- Fix CVE-2017-5715</changelog>
</package>
<package pkgid="e654fba5a0237e8a948d403002bfc6dc396b2a3feb49f6cccf5c0a171289005b" name="qemu-kvm" arch="src">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-133.el7" date="1489060800">- kvm-target-i386-add-Ivy-Bridge-CPU-model.patch [bz#1368375]
- kvm-x86-add-AVX512_4VNNIW-and-AVX512_4FMAPS-features.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Kill-unused-code.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-level.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-CPU-v.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-xleve.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Set-all-feature-words-.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Fill-feature-words-in-.patch [bz#1382122]
- kvm-target-i386-kvm_check_features_against_host-Kill-fea.patch [bz#1382122]
- kvm-target-i386-Make-TCG-feature-filtering-more-readable.patch [bz#1382122]
- kvm-target-i386-Filter-FEAT_7_0_EBX-TCG-features-too.patch [bz#1382122]
- kvm-target-i386-Filter-KVM-and-0xC0000001-features-on-TC.patch [bz#1382122]
- kvm-target-i386-Define-TCG_-_FEATURES-earlier-in-cpu.c.patch [bz#1382122]
- kvm-target-i386-Loop-based-copying-and-setting-unsetting.patch [bz#1382122]
- kvm-target-i386-Loop-based-feature-word-filtering-in-TCG.patch [bz#1382122]
- kvm-spice-remove-spice-experimental.h-include.patch [bz#1430606]
- kvm-spice-replace-use-of-deprecated-API.patch [bz#1430606]
- Resolves: bz#1368375
  ([Intel 7.4 Bug] qemu-kvm does not support “-cpu IvyBridge”)
- Resolves: bz#1382122
  ([Intel 7.4 FEAT] KVM Enable the avx512_4vnniw, avx512_4fmaps instructions in qemu)
- Resolves: bz#1430606
  (Can't build qemu-kvm with newer spice packages)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-134.el7" date="1490097600">- kvm-ui-vnc-introduce-VNC_DIRTY_PIXELS_PER_BIT-macro.patch [bz#1377977]
- kvm-ui-vnc-derive-cmp_bytes-from-VNC_DIRTY_PIXELS_PER_BI.patch [bz#1377977]
- kvm-ui-vnc-optimize-dirty-bitmap-tracking.patch [bz#1377977]
- kvm-ui-vnc-optimize-setting-in-vnc_dpy_update.patch [bz#1377977]
- kvm-ui-vnc-fix-vmware-VGA-incompatiblities.patch [bz#1377977]
- kvm-ui-vnc-fix-potential-memory-corruption-issues.patch [bz#1377977]
- kvm-vnc-fix-memory-corruption-CVE-2015-5225.patch [bz#1377977]
- kvm-vnc-fix-overflow-in-vnc_update_stats.patch [bz#1377977]
- kvm-i386-kvmvapic-initialise-imm32-variable.patch [bz#1335751]
- kvm-qemu-iotests-Filter-out-actual-image-size-in-067.patch [bz#1427176]
- vm-qcow2-Don-t-rely-on-free_cluster_index-in-alloc_ref2.patch [bz#1427176]
- kvm-qemu-iotests-Fix-core-dump-suppression-in-test-039.patch [bz#1427176]
- kvm-qemu-io-Add-sigraise-command.patch [bz#1427176]
- kvm-iotests-Filter-for-Killed-in-qemu-io-output.patch [bz#1427176]
- kvm-iotests-Fix-test-039.patch [bz#1427176]
- kvm-blkdebug-Add-bdrv_truncate.patch [bz#1427176]
- kvm-vhdx-Fix-zero-fill-iov-length.patch [bz#1427176]
- kvm-qemu-iotests-Disable-030-040-041.patch [bz#1427176]
- kvm-x86-add-AVX512_VPOPCNTDQ-features.patch [bz#1415830]
- kvm-usb-ccid-check-ccid-apdu-length.patch [bz#1419818]
- kvm-usb-ccid-better-bulk_out-error-handling.patch [bz#1419818]
- kvm-usb-ccid-move-header-size-check.patch [bz#1419818]
- kvm-usb-ccid-add-check-message-size-checks.patch [bz#1419818]
- kvm-spec-Update-rdma-build-dependency.patch [bz#1433920]
- Resolves: bz#1335751
  (CVE-2016-4020 qemu-kvm: Qemu: i386: leakage of stack memory to guest in kvmvapic.c [rhel-7.4])
- Resolves: bz#1377977
  (qemu-kvm coredump in vnc_raw_send_framebuffer_update [rhel-7.4])
- Resolves: bz#1415830
  ([Intel 7.4 FEAT] Enable vpopcntdq for KNM - qemu/kvm)
- Resolves: bz#1419818
  (CVE-2017-5898 qemu-kvm: Qemu: usb: integer overflow in emulated_apdu_from_guest [rhel-7.4])
- Resolves: bz#1427176
  (test cases of qemu-iotests failed)
- Resolves: bz#1433920
  (Switch from librdmacm-devel to rdma-core-devel)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-135.el7" date="1490875200">- kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1430060]
- kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1430060]
- kvm-cirrus-add-option-to-disable-blitter.patch [bz#1430060]
- kvm-cirrus-fix-cirrus_invalidate_region.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1430060]
- Resolves: bz#1430060
  (CVE-2016-9603 qemu-kvm: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-7.4])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
</package>
<package pkgid="20e66c21fbb0d58a8896c8e26bf7922a8149d58fd2867b93840392a32e4f8389" name="qemu-kvm" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-133.el7" date="1489060800">- kvm-target-i386-add-Ivy-Bridge-CPU-model.patch [bz#1368375]
- kvm-x86-add-AVX512_4VNNIW-and-AVX512_4FMAPS-features.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Kill-unused-code.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-level.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-CPU-v.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-xleve.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Set-all-feature-words-.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Fill-feature-words-in-.patch [bz#1382122]
- kvm-target-i386-kvm_check_features_against_host-Kill-fea.patch [bz#1382122]
- kvm-target-i386-Make-TCG-feature-filtering-more-readable.patch [bz#1382122]
- kvm-target-i386-Filter-FEAT_7_0_EBX-TCG-features-too.patch [bz#1382122]
- kvm-target-i386-Filter-KVM-and-0xC0000001-features-on-TC.patch [bz#1382122]
- kvm-target-i386-Define-TCG_-_FEATURES-earlier-in-cpu.c.patch [bz#1382122]
- kvm-target-i386-Loop-based-copying-and-setting-unsetting.patch [bz#1382122]
- kvm-target-i386-Loop-based-feature-word-filtering-in-TCG.patch [bz#1382122]
- kvm-spice-remove-spice-experimental.h-include.patch [bz#1430606]
- kvm-spice-replace-use-of-deprecated-API.patch [bz#1430606]
- Resolves: bz#1368375
  ([Intel 7.4 Bug] qemu-kvm does not support “-cpu IvyBridge”)
- Resolves: bz#1382122
  ([Intel 7.4 FEAT] KVM Enable the avx512_4vnniw, avx512_4fmaps instructions in qemu)
- Resolves: bz#1430606
  (Can't build qemu-kvm with newer spice packages)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-134.el7" date="1490097600">- kvm-ui-vnc-introduce-VNC_DIRTY_PIXELS_PER_BIT-macro.patch [bz#1377977]
- kvm-ui-vnc-derive-cmp_bytes-from-VNC_DIRTY_PIXELS_PER_BI.patch [bz#1377977]
- kvm-ui-vnc-optimize-dirty-bitmap-tracking.patch [bz#1377977]
- kvm-ui-vnc-optimize-setting-in-vnc_dpy_update.patch [bz#1377977]
- kvm-ui-vnc-fix-vmware-VGA-incompatiblities.patch [bz#1377977]
- kvm-ui-vnc-fix-potential-memory-corruption-issues.patch [bz#1377977]
- kvm-vnc-fix-memory-corruption-CVE-2015-5225.patch [bz#1377977]
- kvm-vnc-fix-overflow-in-vnc_update_stats.patch [bz#1377977]
- kvm-i386-kvmvapic-initialise-imm32-variable.patch [bz#1335751]
- kvm-qemu-iotests-Filter-out-actual-image-size-in-067.patch [bz#1427176]
- vm-qcow2-Don-t-rely-on-free_cluster_index-in-alloc_ref2.patch [bz#1427176]
- kvm-qemu-iotests-Fix-core-dump-suppression-in-test-039.patch [bz#1427176]
- kvm-qemu-io-Add-sigraise-command.patch [bz#1427176]
- kvm-iotests-Filter-for-Killed-in-qemu-io-output.patch [bz#1427176]
- kvm-iotests-Fix-test-039.patch [bz#1427176]
- kvm-blkdebug-Add-bdrv_truncate.patch [bz#1427176]
- kvm-vhdx-Fix-zero-fill-iov-length.patch [bz#1427176]
- kvm-qemu-iotests-Disable-030-040-041.patch [bz#1427176]
- kvm-x86-add-AVX512_VPOPCNTDQ-features.patch [bz#1415830]
- kvm-usb-ccid-check-ccid-apdu-length.patch [bz#1419818]
- kvm-usb-ccid-better-bulk_out-error-handling.patch [bz#1419818]
- kvm-usb-ccid-move-header-size-check.patch [bz#1419818]
- kvm-usb-ccid-add-check-message-size-checks.patch [bz#1419818]
- kvm-spec-Update-rdma-build-dependency.patch [bz#1433920]
- Resolves: bz#1335751
  (CVE-2016-4020 qemu-kvm: Qemu: i386: leakage of stack memory to guest in kvmvapic.c [rhel-7.4])
- Resolves: bz#1377977
  (qemu-kvm coredump in vnc_raw_send_framebuffer_update [rhel-7.4])
- Resolves: bz#1415830
  ([Intel 7.4 FEAT] Enable vpopcntdq for KNM - qemu/kvm)
- Resolves: bz#1419818
  (CVE-2017-5898 qemu-kvm: Qemu: usb: integer overflow in emulated_apdu_from_guest [rhel-7.4])
- Resolves: bz#1427176
  (test cases of qemu-iotests failed)
- Resolves: bz#1433920
  (Switch from librdmacm-devel to rdma-core-devel)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-135.el7" date="1490875200">- kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1430060]
- kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1430060]
- kvm-cirrus-add-option-to-disable-blitter.patch [bz#1430060]
- kvm-cirrus-fix-cirrus_invalidate_region.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1430060]
- Resolves: bz#1430060
  (CVE-2016-9603 qemu-kvm: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-7.4])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
</package>
<package pkgid="8225ea02cbc9b801db0c8ed054399ae0470e032a33548aa108ca9b14b2a81022" name="qemu-kvm" arch="src">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-134.el7" date="1490097600">- kvm-ui-vnc-introduce-VNC_DIRTY_PIXELS_PER_BIT-macro.patch [bz#1377977]
- kvm-ui-vnc-derive-cmp_bytes-from-VNC_DIRTY_PIXELS_PER_BI.patch [bz#1377977]
- kvm-ui-vnc-optimize-dirty-bitmap-tracking.patch [bz#1377977]
- kvm-ui-vnc-optimize-setting-in-vnc_dpy_update.patch [bz#1377977]
- kvm-ui-vnc-fix-vmware-VGA-incompatiblities.patch [bz#1377977]
- kvm-ui-vnc-fix-potential-memory-corruption-issues.patch [bz#1377977]
- kvm-vnc-fix-memory-corruption-CVE-2015-5225.patch [bz#1377977]
- kvm-vnc-fix-overflow-in-vnc_update_stats.patch [bz#1377977]
- kvm-i386-kvmvapic-initialise-imm32-variable.patch [bz#1335751]
- kvm-qemu-iotests-Filter-out-actual-image-size-in-067.patch [bz#1427176]
- vm-qcow2-Don-t-rely-on-free_cluster_index-in-alloc_ref2.patch [bz#1427176]
- kvm-qemu-iotests-Fix-core-dump-suppression-in-test-039.patch [bz#1427176]
- kvm-qemu-io-Add-sigraise-command.patch [bz#1427176]
- kvm-iotests-Filter-for-Killed-in-qemu-io-output.patch [bz#1427176]
- kvm-iotests-Fix-test-039.patch [bz#1427176]
- kvm-blkdebug-Add-bdrv_truncate.patch [bz#1427176]
- kvm-vhdx-Fix-zero-fill-iov-length.patch [bz#1427176]
- kvm-qemu-iotests-Disable-030-040-041.patch [bz#1427176]
- kvm-x86-add-AVX512_VPOPCNTDQ-features.patch [bz#1415830]
- kvm-usb-ccid-check-ccid-apdu-length.patch [bz#1419818]
- kvm-usb-ccid-better-bulk_out-error-handling.patch [bz#1419818]
- kvm-usb-ccid-move-header-size-check.patch [bz#1419818]
- kvm-usb-ccid-add-check-message-size-checks.patch [bz#1419818]
- kvm-spec-Update-rdma-build-dependency.patch [bz#1433920]
- Resolves: bz#1335751
  (CVE-2016-4020 qemu-kvm: Qemu: i386: leakage of stack memory to guest in kvmvapic.c [rhel-7.4])
- Resolves: bz#1377977
  (qemu-kvm coredump in vnc_raw_send_framebuffer_update [rhel-7.4])
- Resolves: bz#1415830
  ([Intel 7.4 FEAT] Enable vpopcntdq for KNM - qemu/kvm)
- Resolves: bz#1419818
  (CVE-2017-5898 qemu-kvm: Qemu: usb: integer overflow in emulated_apdu_from_guest [rhel-7.4])
- Resolves: bz#1427176
  (test cases of qemu-iotests failed)
- Resolves: bz#1433920
  (Switch from librdmacm-devel to rdma-core-devel)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-135.el7" date="1490875200">- kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1430060]
- kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1430060]
- kvm-cirrus-add-option-to-disable-blitter.patch [bz#1430060]
- kvm-cirrus-fix-cirrus_invalidate_region.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1430060]
- Resolves: bz#1430060
  (CVE-2016-9603 qemu-kvm: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-7.4])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
</package>
<package pkgid="9aa68a25fd60054b447d57b77b9a42141d8625ba2d187b4334d02c4f427717a4" name="qemu-kvm" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-134.el7" date="1490097600">- kvm-ui-vnc-introduce-VNC_DIRTY_PIXELS_PER_BIT-macro.patch [bz#1377977]
- kvm-ui-vnc-derive-cmp_bytes-from-VNC_DIRTY_PIXELS_PER_BI.patch [bz#1377977]
- kvm-ui-vnc-optimize-dirty-bitmap-tracking.patch [bz#1377977]
- kvm-ui-vnc-optimize-setting-in-vnc_dpy_update.patch [bz#1377977]
- kvm-ui-vnc-fix-vmware-VGA-incompatiblities.patch [bz#1377977]
- kvm-ui-vnc-fix-potential-memory-corruption-issues.patch [bz#1377977]
- kvm-vnc-fix-memory-corruption-CVE-2015-5225.patch [bz#1377977]
- kvm-vnc-fix-overflow-in-vnc_update_stats.patch [bz#1377977]
- kvm-i386-kvmvapic-initialise-imm32-variable.patch [bz#1335751]
- kvm-qemu-iotests-Filter-out-actual-image-size-in-067.patch [bz#1427176]
- vm-qcow2-Don-t-rely-on-free_cluster_index-in-alloc_ref2.patch [bz#1427176]
- kvm-qemu-iotests-Fix-core-dump-suppression-in-test-039.patch [bz#1427176]
- kvm-qemu-io-Add-sigraise-command.patch [bz#1427176]
- kvm-iotests-Filter-for-Killed-in-qemu-io-output.patch [bz#1427176]
- kvm-iotests-Fix-test-039.patch [bz#1427176]
- kvm-blkdebug-Add-bdrv_truncate.patch [bz#1427176]
- kvm-vhdx-Fix-zero-fill-iov-length.patch [bz#1427176]
- kvm-qemu-iotests-Disable-030-040-041.patch [bz#1427176]
- kvm-x86-add-AVX512_VPOPCNTDQ-features.patch [bz#1415830]
- kvm-usb-ccid-check-ccid-apdu-length.patch [bz#1419818]
- kvm-usb-ccid-better-bulk_out-error-handling.patch [bz#1419818]
- kvm-usb-ccid-move-header-size-check.patch [bz#1419818]
- kvm-usb-ccid-add-check-message-size-checks.patch [bz#1419818]
- kvm-spec-Update-rdma-build-dependency.patch [bz#1433920]
- Resolves: bz#1335751
  (CVE-2016-4020 qemu-kvm: Qemu: i386: leakage of stack memory to guest in kvmvapic.c [rhel-7.4])
- Resolves: bz#1377977
  (qemu-kvm coredump in vnc_raw_send_framebuffer_update [rhel-7.4])
- Resolves: bz#1415830
  ([Intel 7.4 FEAT] Enable vpopcntdq for KNM - qemu/kvm)
- Resolves: bz#1419818
  (CVE-2017-5898 qemu-kvm: Qemu: usb: integer overflow in emulated_apdu_from_guest [rhel-7.4])
- Resolves: bz#1427176
  (test cases of qemu-iotests failed)
- Resolves: bz#1433920
  (Switch from librdmacm-devel to rdma-core-devel)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-135.el7" date="1490875200">- kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1430060]
- kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1430060]
- kvm-cirrus-add-option-to-disable-blitter.patch [bz#1430060]
- kvm-cirrus-fix-cirrus_invalidate_region.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1430060]
- Resolves: bz#1430060
  (CVE-2016-9603 qemu-kvm: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-7.4])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
</package>
<package pkgid="65aca6b4a3acb3cc434cfd6c02e39b4ffc49f04d375d71d38b459c31dd5fdff8" name="qemu-kvm" arch="src">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
</package>
<package pkgid="72fd8deb82a37c5a95421c807dc3b4001de759426532ea04f08b97db84494141" name="qemu-kvm" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
</package>
<package pkgid="e8ae76fdc2e0bd2165533a348d444561d7b796a407a368454350f03c8fd368ac" name="qemu-kvm" arch="src">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.5"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.5" date="1511956800">- kvm-vfio-pci-Only-mmap-TARGET_PAGE_SIZE-regions.patch [bz#1515110]
- Resolves: bz#1515110
  (Regression in QEMU handling for sub-page MMIO BARs for vfio-pci devices [rhel-7.4.z])</changelog>
</package>
<package pkgid="bde8c3e57ec5398fe5e3bea1846d6374bb7fb8877e53b65f50aa11870cb0cc61" name="qemu-kvm" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.5"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.5" date="1511956800">- kvm-vfio-pci-Only-mmap-TARGET_PAGE_SIZE-regions.patch [bz#1515110]
- Resolves: bz#1515110
  (Regression in QEMU handling for sub-page MMIO BARs for vfio-pci devices [rhel-7.4.z])</changelog>
</package>
<package pkgid="32f16f4d823eba3b2a9792d135a258822b0ffb06d194fdc5ceba841387374e36" name="qemu-kvm" arch="src">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.5" date="1511956800">- kvm-vfio-pci-Only-mmap-TARGET_PAGE_SIZE-regions.patch [bz#1515110]
- Resolves: bz#1515110
  (Regression in QEMU handling for sub-page MMIO BARs for vfio-pci devices [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.6" date="1513252800">- Fix CVE-2017-5715</changelog>
</package>
<package pkgid="4ab086c88c9605a1258d8469258d88f18fb1f060d24aa46cc0b09afc527f12af" name="qemu-kvm" arch="src">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.5" date="1511956800">- kvm-vfio-pci-Only-mmap-TARGET_PAGE_SIZE-regions.patch [bz#1515110]
- Resolves: bz#1515110
  (Regression in QEMU handling for sub-page MMIO BARs for vfio-pci devices [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.6" date="1513252800">- Fix CVE-2017-5715</changelog>
</package>
<package pkgid="53246cfa9cd173933a93a0b23fef24afed32ac87bebc6b2a54f3f978a9ef75bc" name="qemu-kvm" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.5" date="1511956800">- kvm-vfio-pci-Only-mmap-TARGET_PAGE_SIZE-regions.patch [bz#1515110]
- Resolves: bz#1515110
  (Regression in QEMU handling for sub-page MMIO BARs for vfio-pci devices [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.6" date="1513252800">- Fix CVE-2017-5715</changelog>
</package>
<package pkgid="c3be4679c4aecf985590270bfe942437a400d49b28b30e2a6306d3969d8652fd" name="qemu-kvm" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.5" date="1511956800">- kvm-vfio-pci-Only-mmap-TARGET_PAGE_SIZE-regions.patch [bz#1515110]
- Resolves: bz#1515110
  (Regression in QEMU handling for sub-page MMIO BARs for vfio-pci devices [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.6" date="1513252800">- Fix CVE-2017-5715</changelog>
</package>
<package pkgid="ae58fc90207c4587bd84afd79c5e706106e98e0f01a1c1ae42b17ad4782dcb36" name="qemu-kvm-common" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-133.el7" date="1489060800">- kvm-target-i386-add-Ivy-Bridge-CPU-model.patch [bz#1368375]
- kvm-x86-add-AVX512_4VNNIW-and-AVX512_4FMAPS-features.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Kill-unused-code.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-level.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-CPU-v.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-xleve.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Set-all-feature-words-.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Fill-feature-words-in-.patch [bz#1382122]
- kvm-target-i386-kvm_check_features_against_host-Kill-fea.patch [bz#1382122]
- kvm-target-i386-Make-TCG-feature-filtering-more-readable.patch [bz#1382122]
- kvm-target-i386-Filter-FEAT_7_0_EBX-TCG-features-too.patch [bz#1382122]
- kvm-target-i386-Filter-KVM-and-0xC0000001-features-on-TC.patch [bz#1382122]
- kvm-target-i386-Define-TCG_-_FEATURES-earlier-in-cpu.c.patch [bz#1382122]
- kvm-target-i386-Loop-based-copying-and-setting-unsetting.patch [bz#1382122]
- kvm-target-i386-Loop-based-feature-word-filtering-in-TCG.patch [bz#1382122]
- kvm-spice-remove-spice-experimental.h-include.patch [bz#1430606]
- kvm-spice-replace-use-of-deprecated-API.patch [bz#1430606]
- Resolves: bz#1368375
  ([Intel 7.4 Bug] qemu-kvm does not support “-cpu IvyBridge”)
- Resolves: bz#1382122
  ([Intel 7.4 FEAT] KVM Enable the avx512_4vnniw, avx512_4fmaps instructions in qemu)
- Resolves: bz#1430606
  (Can't build qemu-kvm with newer spice packages)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-134.el7" date="1490097600">- kvm-ui-vnc-introduce-VNC_DIRTY_PIXELS_PER_BIT-macro.patch [bz#1377977]
- kvm-ui-vnc-derive-cmp_bytes-from-VNC_DIRTY_PIXELS_PER_BI.patch [bz#1377977]
- kvm-ui-vnc-optimize-dirty-bitmap-tracking.patch [bz#1377977]
- kvm-ui-vnc-optimize-setting-in-vnc_dpy_update.patch [bz#1377977]
- kvm-ui-vnc-fix-vmware-VGA-incompatiblities.patch [bz#1377977]
- kvm-ui-vnc-fix-potential-memory-corruption-issues.patch [bz#1377977]
- kvm-vnc-fix-memory-corruption-CVE-2015-5225.patch [bz#1377977]
- kvm-vnc-fix-overflow-in-vnc_update_stats.patch [bz#1377977]
- kvm-i386-kvmvapic-initialise-imm32-variable.patch [bz#1335751]
- kvm-qemu-iotests-Filter-out-actual-image-size-in-067.patch [bz#1427176]
- vm-qcow2-Don-t-rely-on-free_cluster_index-in-alloc_ref2.patch [bz#1427176]
- kvm-qemu-iotests-Fix-core-dump-suppression-in-test-039.patch [bz#1427176]
- kvm-qemu-io-Add-sigraise-command.patch [bz#1427176]
- kvm-iotests-Filter-for-Killed-in-qemu-io-output.patch [bz#1427176]
- kvm-iotests-Fix-test-039.patch [bz#1427176]
- kvm-blkdebug-Add-bdrv_truncate.patch [bz#1427176]
- kvm-vhdx-Fix-zero-fill-iov-length.patch [bz#1427176]
- kvm-qemu-iotests-Disable-030-040-041.patch [bz#1427176]
- kvm-x86-add-AVX512_VPOPCNTDQ-features.patch [bz#1415830]
- kvm-usb-ccid-check-ccid-apdu-length.patch [bz#1419818]
- kvm-usb-ccid-better-bulk_out-error-handling.patch [bz#1419818]
- kvm-usb-ccid-move-header-size-check.patch [bz#1419818]
- kvm-usb-ccid-add-check-message-size-checks.patch [bz#1419818]
- kvm-spec-Update-rdma-build-dependency.patch [bz#1433920]
- Resolves: bz#1335751
  (CVE-2016-4020 qemu-kvm: Qemu: i386: leakage of stack memory to guest in kvmvapic.c [rhel-7.4])
- Resolves: bz#1377977
  (qemu-kvm coredump in vnc_raw_send_framebuffer_update [rhel-7.4])
- Resolves: bz#1415830
  ([Intel 7.4 FEAT] Enable vpopcntdq for KNM - qemu/kvm)
- Resolves: bz#1419818
  (CVE-2017-5898 qemu-kvm: Qemu: usb: integer overflow in emulated_apdu_from_guest [rhel-7.4])
- Resolves: bz#1427176
  (test cases of qemu-iotests failed)
- Resolves: bz#1433920
  (Switch from librdmacm-devel to rdma-core-devel)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-135.el7" date="1490875200">- kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1430060]
- kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1430060]
- kvm-cirrus-add-option-to-disable-blitter.patch [bz#1430060]
- kvm-cirrus-fix-cirrus_invalidate_region.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1430060]
- Resolves: bz#1430060
  (CVE-2016-9603 qemu-kvm: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-7.4])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
</package>
<package pkgid="2994f3a2078f09a868ade5559ac21e05349f8d7519996d0d550065c3a34f1989" name="qemu-kvm-common" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-134.el7" date="1490097600">- kvm-ui-vnc-introduce-VNC_DIRTY_PIXELS_PER_BIT-macro.patch [bz#1377977]
- kvm-ui-vnc-derive-cmp_bytes-from-VNC_DIRTY_PIXELS_PER_BI.patch [bz#1377977]
- kvm-ui-vnc-optimize-dirty-bitmap-tracking.patch [bz#1377977]
- kvm-ui-vnc-optimize-setting-in-vnc_dpy_update.patch [bz#1377977]
- kvm-ui-vnc-fix-vmware-VGA-incompatiblities.patch [bz#1377977]
- kvm-ui-vnc-fix-potential-memory-corruption-issues.patch [bz#1377977]
- kvm-vnc-fix-memory-corruption-CVE-2015-5225.patch [bz#1377977]
- kvm-vnc-fix-overflow-in-vnc_update_stats.patch [bz#1377977]
- kvm-i386-kvmvapic-initialise-imm32-variable.patch [bz#1335751]
- kvm-qemu-iotests-Filter-out-actual-image-size-in-067.patch [bz#1427176]
- vm-qcow2-Don-t-rely-on-free_cluster_index-in-alloc_ref2.patch [bz#1427176]
- kvm-qemu-iotests-Fix-core-dump-suppression-in-test-039.patch [bz#1427176]
- kvm-qemu-io-Add-sigraise-command.patch [bz#1427176]
- kvm-iotests-Filter-for-Killed-in-qemu-io-output.patch [bz#1427176]
- kvm-iotests-Fix-test-039.patch [bz#1427176]
- kvm-blkdebug-Add-bdrv_truncate.patch [bz#1427176]
- kvm-vhdx-Fix-zero-fill-iov-length.patch [bz#1427176]
- kvm-qemu-iotests-Disable-030-040-041.patch [bz#1427176]
- kvm-x86-add-AVX512_VPOPCNTDQ-features.patch [bz#1415830]
- kvm-usb-ccid-check-ccid-apdu-length.patch [bz#1419818]
- kvm-usb-ccid-better-bulk_out-error-handling.patch [bz#1419818]
- kvm-usb-ccid-move-header-size-check.patch [bz#1419818]
- kvm-usb-ccid-add-check-message-size-checks.patch [bz#1419818]
- kvm-spec-Update-rdma-build-dependency.patch [bz#1433920]
- Resolves: bz#1335751
  (CVE-2016-4020 qemu-kvm: Qemu: i386: leakage of stack memory to guest in kvmvapic.c [rhel-7.4])
- Resolves: bz#1377977
  (qemu-kvm coredump in vnc_raw_send_framebuffer_update [rhel-7.4])
- Resolves: bz#1415830
  ([Intel 7.4 FEAT] Enable vpopcntdq for KNM - qemu/kvm)
- Resolves: bz#1419818
  (CVE-2017-5898 qemu-kvm: Qemu: usb: integer overflow in emulated_apdu_from_guest [rhel-7.4])
- Resolves: bz#1427176
  (test cases of qemu-iotests failed)
- Resolves: bz#1433920
  (Switch from librdmacm-devel to rdma-core-devel)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-135.el7" date="1490875200">- kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1430060]
- kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1430060]
- kvm-cirrus-add-option-to-disable-blitter.patch [bz#1430060]
- kvm-cirrus-fix-cirrus_invalidate_region.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1430060]
- Resolves: bz#1430060
  (CVE-2016-9603 qemu-kvm: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-7.4])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
</package>
<package pkgid="67238fccd7610595517af833e22ea4258fa8625dbb8c3f04fce00a3440e8b889" name="qemu-kvm-common" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
</package>
<package pkgid="811ffb0732ff24d950426667269796942ab9e5af3cefb0f227bbc9c51e6553eb" name="qemu-kvm-common" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.5"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.5" date="1511956800">- kvm-vfio-pci-Only-mmap-TARGET_PAGE_SIZE-regions.patch [bz#1515110]
- Resolves: bz#1515110
  (Regression in QEMU handling for sub-page MMIO BARs for vfio-pci devices [rhel-7.4.z])</changelog>
</package>
<package pkgid="64f9e99f02dde937043acd7614b501a4fe202932210b9e875ac3df60fcbbac28" name="qemu-kvm-common" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.5" date="1511956800">- kvm-vfio-pci-Only-mmap-TARGET_PAGE_SIZE-regions.patch [bz#1515110]
- Resolves: bz#1515110
  (Regression in QEMU handling for sub-page MMIO BARs for vfio-pci devices [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.6" date="1513252800">- Fix CVE-2017-5715</changelog>
</package>
<package pkgid="8b3ea2ac195a4e5846fea7b629ffdd024b3306cfa43946af1005700467315f7f" name="qemu-kvm-common" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.5" date="1511956800">- kvm-vfio-pci-Only-mmap-TARGET_PAGE_SIZE-regions.patch [bz#1515110]
- Resolves: bz#1515110
  (Regression in QEMU handling for sub-page MMIO BARs for vfio-pci devices [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.6" date="1513252800">- Fix CVE-2017-5715</changelog>
</package>
<package pkgid="f7013e662f43f59d6865309d4489831f14428cf79e1d69d591ce6105e66e5278" name="qemu-kvm-debuginfo" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-133.el7" date="1489060800">- kvm-target-i386-add-Ivy-Bridge-CPU-model.patch [bz#1368375]
- kvm-x86-add-AVX512_4VNNIW-and-AVX512_4FMAPS-features.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Kill-unused-code.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-level.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-CPU-v.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-xleve.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Set-all-feature-words-.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Fill-feature-words-in-.patch [bz#1382122]
- kvm-target-i386-kvm_check_features_against_host-Kill-fea.patch [bz#1382122]
- kvm-target-i386-Make-TCG-feature-filtering-more-readable.patch [bz#1382122]
- kvm-target-i386-Filter-FEAT_7_0_EBX-TCG-features-too.patch [bz#1382122]
- kvm-target-i386-Filter-KVM-and-0xC0000001-features-on-TC.patch [bz#1382122]
- kvm-target-i386-Define-TCG_-_FEATURES-earlier-in-cpu.c.patch [bz#1382122]
- kvm-target-i386-Loop-based-copying-and-setting-unsetting.patch [bz#1382122]
- kvm-target-i386-Loop-based-feature-word-filtering-in-TCG.patch [bz#1382122]
- kvm-spice-remove-spice-experimental.h-include.patch [bz#1430606]
- kvm-spice-replace-use-of-deprecated-API.patch [bz#1430606]
- Resolves: bz#1368375
  ([Intel 7.4 Bug] qemu-kvm does not support “-cpu IvyBridge”)
- Resolves: bz#1382122
  ([Intel 7.4 FEAT] KVM Enable the avx512_4vnniw, avx512_4fmaps instructions in qemu)
- Resolves: bz#1430606
  (Can't build qemu-kvm with newer spice packages)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-134.el7" date="1490097600">- kvm-ui-vnc-introduce-VNC_DIRTY_PIXELS_PER_BIT-macro.patch [bz#1377977]
- kvm-ui-vnc-derive-cmp_bytes-from-VNC_DIRTY_PIXELS_PER_BI.patch [bz#1377977]
- kvm-ui-vnc-optimize-dirty-bitmap-tracking.patch [bz#1377977]
- kvm-ui-vnc-optimize-setting-in-vnc_dpy_update.patch [bz#1377977]
- kvm-ui-vnc-fix-vmware-VGA-incompatiblities.patch [bz#1377977]
- kvm-ui-vnc-fix-potential-memory-corruption-issues.patch [bz#1377977]
- kvm-vnc-fix-memory-corruption-CVE-2015-5225.patch [bz#1377977]
- kvm-vnc-fix-overflow-in-vnc_update_stats.patch [bz#1377977]
- kvm-i386-kvmvapic-initialise-imm32-variable.patch [bz#1335751]
- kvm-qemu-iotests-Filter-out-actual-image-size-in-067.patch [bz#1427176]
- vm-qcow2-Don-t-rely-on-free_cluster_index-in-alloc_ref2.patch [bz#1427176]
- kvm-qemu-iotests-Fix-core-dump-suppression-in-test-039.patch [bz#1427176]
- kvm-qemu-io-Add-sigraise-command.patch [bz#1427176]
- kvm-iotests-Filter-for-Killed-in-qemu-io-output.patch [bz#1427176]
- kvm-iotests-Fix-test-039.patch [bz#1427176]
- kvm-blkdebug-Add-bdrv_truncate.patch [bz#1427176]
- kvm-vhdx-Fix-zero-fill-iov-length.patch [bz#1427176]
- kvm-qemu-iotests-Disable-030-040-041.patch [bz#1427176]
- kvm-x86-add-AVX512_VPOPCNTDQ-features.patch [bz#1415830]
- kvm-usb-ccid-check-ccid-apdu-length.patch [bz#1419818]
- kvm-usb-ccid-better-bulk_out-error-handling.patch [bz#1419818]
- kvm-usb-ccid-move-header-size-check.patch [bz#1419818]
- kvm-usb-ccid-add-check-message-size-checks.patch [bz#1419818]
- kvm-spec-Update-rdma-build-dependency.patch [bz#1433920]
- Resolves: bz#1335751
  (CVE-2016-4020 qemu-kvm: Qemu: i386: leakage of stack memory to guest in kvmvapic.c [rhel-7.4])
- Resolves: bz#1377977
  (qemu-kvm coredump in vnc_raw_send_framebuffer_update [rhel-7.4])
- Resolves: bz#1415830
  ([Intel 7.4 FEAT] Enable vpopcntdq for KNM - qemu/kvm)
- Resolves: bz#1419818
  (CVE-2017-5898 qemu-kvm: Qemu: usb: integer overflow in emulated_apdu_from_guest [rhel-7.4])
- Resolves: bz#1427176
  (test cases of qemu-iotests failed)
- Resolves: bz#1433920
  (Switch from librdmacm-devel to rdma-core-devel)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-135.el7" date="1490875200">- kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1430060]
- kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1430060]
- kvm-cirrus-add-option-to-disable-blitter.patch [bz#1430060]
- kvm-cirrus-fix-cirrus_invalidate_region.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1430060]
- Resolves: bz#1430060
  (CVE-2016-9603 qemu-kvm: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-7.4])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
</package>
<package pkgid="7564c9c174ec913ebdc2e99f55f85fb5d52f87d880858991cffce306169430b1" name="qemu-kvm-debuginfo" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-134.el7" date="1490097600">- kvm-ui-vnc-introduce-VNC_DIRTY_PIXELS_PER_BIT-macro.patch [bz#1377977]
- kvm-ui-vnc-derive-cmp_bytes-from-VNC_DIRTY_PIXELS_PER_BI.patch [bz#1377977]
- kvm-ui-vnc-optimize-dirty-bitmap-tracking.patch [bz#1377977]
- kvm-ui-vnc-optimize-setting-in-vnc_dpy_update.patch [bz#1377977]
- kvm-ui-vnc-fix-vmware-VGA-incompatiblities.patch [bz#1377977]
- kvm-ui-vnc-fix-potential-memory-corruption-issues.patch [bz#1377977]
- kvm-vnc-fix-memory-corruption-CVE-2015-5225.patch [bz#1377977]
- kvm-vnc-fix-overflow-in-vnc_update_stats.patch [bz#1377977]
- kvm-i386-kvmvapic-initialise-imm32-variable.patch [bz#1335751]
- kvm-qemu-iotests-Filter-out-actual-image-size-in-067.patch [bz#1427176]
- vm-qcow2-Don-t-rely-on-free_cluster_index-in-alloc_ref2.patch [bz#1427176]
- kvm-qemu-iotests-Fix-core-dump-suppression-in-test-039.patch [bz#1427176]
- kvm-qemu-io-Add-sigraise-command.patch [bz#1427176]
- kvm-iotests-Filter-for-Killed-in-qemu-io-output.patch [bz#1427176]
- kvm-iotests-Fix-test-039.patch [bz#1427176]
- kvm-blkdebug-Add-bdrv_truncate.patch [bz#1427176]
- kvm-vhdx-Fix-zero-fill-iov-length.patch [bz#1427176]
- kvm-qemu-iotests-Disable-030-040-041.patch [bz#1427176]
- kvm-x86-add-AVX512_VPOPCNTDQ-features.patch [bz#1415830]
- kvm-usb-ccid-check-ccid-apdu-length.patch [bz#1419818]
- kvm-usb-ccid-better-bulk_out-error-handling.patch [bz#1419818]
- kvm-usb-ccid-move-header-size-check.patch [bz#1419818]
- kvm-usb-ccid-add-check-message-size-checks.patch [bz#1419818]
- kvm-spec-Update-rdma-build-dependency.patch [bz#1433920]
- Resolves: bz#1335751
  (CVE-2016-4020 qemu-kvm: Qemu: i386: leakage of stack memory to guest in kvmvapic.c [rhel-7.4])
- Resolves: bz#1377977
  (qemu-kvm coredump in vnc_raw_send_framebuffer_update [rhel-7.4])
- Resolves: bz#1415830
  ([Intel 7.4 FEAT] Enable vpopcntdq for KNM - qemu/kvm)
- Resolves: bz#1419818
  (CVE-2017-5898 qemu-kvm: Qemu: usb: integer overflow in emulated_apdu_from_guest [rhel-7.4])
- Resolves: bz#1427176
  (test cases of qemu-iotests failed)
- Resolves: bz#1433920
  (Switch from librdmacm-devel to rdma-core-devel)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-135.el7" date="1490875200">- kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1430060]
- kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1430060]
- kvm-cirrus-add-option-to-disable-blitter.patch [bz#1430060]
- kvm-cirrus-fix-cirrus_invalidate_region.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1430060]
- Resolves: bz#1430060
  (CVE-2016-9603 qemu-kvm: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-7.4])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
</package>
<package pkgid="b4aaf6be33c0c08a38f388723f3cf7a4ed6b17dec28bc53872f8d34a6e747ac4" name="qemu-kvm-debuginfo" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
</package>
<package pkgid="2abfb290c85556bc5419eaf26132cb5e18fd8a4c7e0020a521b25f4b417ef385" name="qemu-kvm-debuginfo" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.5"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.5" date="1511956800">- kvm-vfio-pci-Only-mmap-TARGET_PAGE_SIZE-regions.patch [bz#1515110]
- Resolves: bz#1515110
  (Regression in QEMU handling for sub-page MMIO BARs for vfio-pci devices [rhel-7.4.z])</changelog>
</package>
<package pkgid="3e4f7af31975a362af0f8599c87fcd25accd949fbf056567ecc68cb2329d7055" name="qemu-kvm-debuginfo" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.5" date="1511956800">- kvm-vfio-pci-Only-mmap-TARGET_PAGE_SIZE-regions.patch [bz#1515110]
- Resolves: bz#1515110
  (Regression in QEMU handling for sub-page MMIO BARs for vfio-pci devices [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.6" date="1513252800">- Fix CVE-2017-5715</changelog>
</package>
<package pkgid="42056100cc730bcf78533765183b0ff099cbd897b9e4e41f4229adeeea545b34" name="qemu-kvm-debuginfo" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.5" date="1511956800">- kvm-vfio-pci-Only-mmap-TARGET_PAGE_SIZE-regions.patch [bz#1515110]
- Resolves: bz#1515110
  (Regression in QEMU handling for sub-page MMIO BARs for vfio-pci devices [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.6" date="1513252800">- Fix CVE-2017-5715</changelog>
</package>
<package pkgid="4f7be277929ebe6c1e36a7513751e2ea362e38159587c8fbaa556216414ff7c9" name="qemu-kvm-tools" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-133.el7" date="1489060800">- kvm-target-i386-add-Ivy-Bridge-CPU-model.patch [bz#1368375]
- kvm-x86-add-AVX512_4VNNIW-and-AVX512_4FMAPS-features.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Kill-unused-code.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-level.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-CPU-v.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-xleve.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Set-all-feature-words-.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Fill-feature-words-in-.patch [bz#1382122]
- kvm-target-i386-kvm_check_features_against_host-Kill-fea.patch [bz#1382122]
- kvm-target-i386-Make-TCG-feature-filtering-more-readable.patch [bz#1382122]
- kvm-target-i386-Filter-FEAT_7_0_EBX-TCG-features-too.patch [bz#1382122]
- kvm-target-i386-Filter-KVM-and-0xC0000001-features-on-TC.patch [bz#1382122]
- kvm-target-i386-Define-TCG_-_FEATURES-earlier-in-cpu.c.patch [bz#1382122]
- kvm-target-i386-Loop-based-copying-and-setting-unsetting.patch [bz#1382122]
- kvm-target-i386-Loop-based-feature-word-filtering-in-TCG.patch [bz#1382122]
- kvm-spice-remove-spice-experimental.h-include.patch [bz#1430606]
- kvm-spice-replace-use-of-deprecated-API.patch [bz#1430606]
- Resolves: bz#1368375
  ([Intel 7.4 Bug] qemu-kvm does not support “-cpu IvyBridge”)
- Resolves: bz#1382122
  ([Intel 7.4 FEAT] KVM Enable the avx512_4vnniw, avx512_4fmaps instructions in qemu)
- Resolves: bz#1430606
  (Can't build qemu-kvm with newer spice packages)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-134.el7" date="1490097600">- kvm-ui-vnc-introduce-VNC_DIRTY_PIXELS_PER_BIT-macro.patch [bz#1377977]
- kvm-ui-vnc-derive-cmp_bytes-from-VNC_DIRTY_PIXELS_PER_BI.patch [bz#1377977]
- kvm-ui-vnc-optimize-dirty-bitmap-tracking.patch [bz#1377977]
- kvm-ui-vnc-optimize-setting-in-vnc_dpy_update.patch [bz#1377977]
- kvm-ui-vnc-fix-vmware-VGA-incompatiblities.patch [bz#1377977]
- kvm-ui-vnc-fix-potential-memory-corruption-issues.patch [bz#1377977]
- kvm-vnc-fix-memory-corruption-CVE-2015-5225.patch [bz#1377977]
- kvm-vnc-fix-overflow-in-vnc_update_stats.patch [bz#1377977]
- kvm-i386-kvmvapic-initialise-imm32-variable.patch [bz#1335751]
- kvm-qemu-iotests-Filter-out-actual-image-size-in-067.patch [bz#1427176]
- vm-qcow2-Don-t-rely-on-free_cluster_index-in-alloc_ref2.patch [bz#1427176]
- kvm-qemu-iotests-Fix-core-dump-suppression-in-test-039.patch [bz#1427176]
- kvm-qemu-io-Add-sigraise-command.patch [bz#1427176]
- kvm-iotests-Filter-for-Killed-in-qemu-io-output.patch [bz#1427176]
- kvm-iotests-Fix-test-039.patch [bz#1427176]
- kvm-blkdebug-Add-bdrv_truncate.patch [bz#1427176]
- kvm-vhdx-Fix-zero-fill-iov-length.patch [bz#1427176]
- kvm-qemu-iotests-Disable-030-040-041.patch [bz#1427176]
- kvm-x86-add-AVX512_VPOPCNTDQ-features.patch [bz#1415830]
- kvm-usb-ccid-check-ccid-apdu-length.patch [bz#1419818]
- kvm-usb-ccid-better-bulk_out-error-handling.patch [bz#1419818]
- kvm-usb-ccid-move-header-size-check.patch [bz#1419818]
- kvm-usb-ccid-add-check-message-size-checks.patch [bz#1419818]
- kvm-spec-Update-rdma-build-dependency.patch [bz#1433920]
- Resolves: bz#1335751
  (CVE-2016-4020 qemu-kvm: Qemu: i386: leakage of stack memory to guest in kvmvapic.c [rhel-7.4])
- Resolves: bz#1377977
  (qemu-kvm coredump in vnc_raw_send_framebuffer_update [rhel-7.4])
- Resolves: bz#1415830
  ([Intel 7.4 FEAT] Enable vpopcntdq for KNM - qemu/kvm)
- Resolves: bz#1419818
  (CVE-2017-5898 qemu-kvm: Qemu: usb: integer overflow in emulated_apdu_from_guest [rhel-7.4])
- Resolves: bz#1427176
  (test cases of qemu-iotests failed)
- Resolves: bz#1433920
  (Switch from librdmacm-devel to rdma-core-devel)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-135.el7" date="1490875200">- kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1430060]
- kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1430060]
- kvm-cirrus-add-option-to-disable-blitter.patch [bz#1430060]
- kvm-cirrus-fix-cirrus_invalidate_region.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1430060]
- Resolves: bz#1430060
  (CVE-2016-9603 qemu-kvm: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-7.4])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
</package>
<package pkgid="aba8870e9e297897aa82fca995ace0dc7f42a50cd138c38a27b91bffe26cd4bc" name="qemu-kvm-tools" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-134.el7" date="1490097600">- kvm-ui-vnc-introduce-VNC_DIRTY_PIXELS_PER_BIT-macro.patch [bz#1377977]
- kvm-ui-vnc-derive-cmp_bytes-from-VNC_DIRTY_PIXELS_PER_BI.patch [bz#1377977]
- kvm-ui-vnc-optimize-dirty-bitmap-tracking.patch [bz#1377977]
- kvm-ui-vnc-optimize-setting-in-vnc_dpy_update.patch [bz#1377977]
- kvm-ui-vnc-fix-vmware-VGA-incompatiblities.patch [bz#1377977]
- kvm-ui-vnc-fix-potential-memory-corruption-issues.patch [bz#1377977]
- kvm-vnc-fix-memory-corruption-CVE-2015-5225.patch [bz#1377977]
- kvm-vnc-fix-overflow-in-vnc_update_stats.patch [bz#1377977]
- kvm-i386-kvmvapic-initialise-imm32-variable.patch [bz#1335751]
- kvm-qemu-iotests-Filter-out-actual-image-size-in-067.patch [bz#1427176]
- vm-qcow2-Don-t-rely-on-free_cluster_index-in-alloc_ref2.patch [bz#1427176]
- kvm-qemu-iotests-Fix-core-dump-suppression-in-test-039.patch [bz#1427176]
- kvm-qemu-io-Add-sigraise-command.patch [bz#1427176]
- kvm-iotests-Filter-for-Killed-in-qemu-io-output.patch [bz#1427176]
- kvm-iotests-Fix-test-039.patch [bz#1427176]
- kvm-blkdebug-Add-bdrv_truncate.patch [bz#1427176]
- kvm-vhdx-Fix-zero-fill-iov-length.patch [bz#1427176]
- kvm-qemu-iotests-Disable-030-040-041.patch [bz#1427176]
- kvm-x86-add-AVX512_VPOPCNTDQ-features.patch [bz#1415830]
- kvm-usb-ccid-check-ccid-apdu-length.patch [bz#1419818]
- kvm-usb-ccid-better-bulk_out-error-handling.patch [bz#1419818]
- kvm-usb-ccid-move-header-size-check.patch [bz#1419818]
- kvm-usb-ccid-add-check-message-size-checks.patch [bz#1419818]
- kvm-spec-Update-rdma-build-dependency.patch [bz#1433920]
- Resolves: bz#1335751
  (CVE-2016-4020 qemu-kvm: Qemu: i386: leakage of stack memory to guest in kvmvapic.c [rhel-7.4])
- Resolves: bz#1377977
  (qemu-kvm coredump in vnc_raw_send_framebuffer_update [rhel-7.4])
- Resolves: bz#1415830
  ([Intel 7.4 FEAT] Enable vpopcntdq for KNM - qemu/kvm)
- Resolves: bz#1419818
  (CVE-2017-5898 qemu-kvm: Qemu: usb: integer overflow in emulated_apdu_from_guest [rhel-7.4])
- Resolves: bz#1427176
  (test cases of qemu-iotests failed)
- Resolves: bz#1433920
  (Switch from librdmacm-devel to rdma-core-devel)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-135.el7" date="1490875200">- kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1430060]
- kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1430060]
- kvm-cirrus-add-option-to-disable-blitter.patch [bz#1430060]
- kvm-cirrus-fix-cirrus_invalidate_region.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1430060]
- Resolves: bz#1430060
  (CVE-2016-9603 qemu-kvm: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-7.4])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
</package>
<package pkgid="bea8ea1ece71ae2fd3ff4da1dbf8e84533fd74a5d602030c94a293ff0af9b2b6" name="qemu-kvm-tools" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
</package>
<package pkgid="538d8656b39efb5e197800a57585e0eb94f4340d613065b8f49b3faa95c1c34e" name="qemu-kvm-tools" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.5"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.5" date="1511956800">- kvm-vfio-pci-Only-mmap-TARGET_PAGE_SIZE-regions.patch [bz#1515110]
- Resolves: bz#1515110
  (Regression in QEMU handling for sub-page MMIO BARs for vfio-pci devices [rhel-7.4.z])</changelog>
</package>
<package pkgid="cb6ece67798a302238cd525f96f8f6e624684a7c678c80536df6c824f6edab98" name="qemu-kvm-tools" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.5" date="1511956800">- kvm-vfio-pci-Only-mmap-TARGET_PAGE_SIZE-regions.patch [bz#1515110]
- Resolves: bz#1515110
  (Regression in QEMU handling for sub-page MMIO BARs for vfio-pci devices [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.6" date="1513252800">- Fix CVE-2017-5715</changelog>
</package>
<package pkgid="2cc2fc16ca933bbc4016e711a35f57fe6e0493621d62981ab9213340a65710de" name="qemu-kvm-tools" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.5" date="1511956800">- kvm-vfio-pci-Only-mmap-TARGET_PAGE_SIZE-regions.patch [bz#1515110]
- Resolves: bz#1515110
  (Regression in QEMU handling for sub-page MMIO BARs for vfio-pci devices [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.6" date="1513252800">- Fix CVE-2017-5715</changelog>
</package>
<package pkgid="5dedcf08e7dbfee86f42a813b327c7eb968f7e47a2a81b089fca707c6d5062e7" name="qt" arch="i686">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="bd2fae5cfb2743077875abd79ddc8cbcf9d8172efe20321bb9b236338ac40bdf" name="qt" arch="src">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="463c3b678ce53f2237ba688593b8bd5f6f745c6298c74b55e03e44bb0f25164a" name="qt" arch="src">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="f170372208a9b3e041f77155bfbd93c8940b0dc098860fc68b4598b6f32c8120" name="qt" arch="x86_64">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="e6212e16d9c89833c7370a8f087568ea3f998a68fa185792c8dd3e27ed5c8a9a" name="qt-assistant" arch="i686">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="acdfe1047abdd44665d96976a15f2844a2f7175d3769564add686596ebe4416a" name="qt-assistant" arch="x86_64">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="560ea2ca31310c2e4d2e745c4d9989ad90a143c6a2ba526c48409fe3477af077" name="qt-config" arch="i686">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="d9007bcc7c17768204c953d4cc22b5ba4b366ac10532b6d757fc0467df297a94" name="qt-config" arch="x86_64">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="d58e0ecde7f4f2e4e38fe413c00dc18be9976badfef3b7de48a4b48ffab11ce8" name="qt-debuginfo" arch="i686">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="4957b2321ac121101e3b097e02a6529e7c1a9c908084653cd3bb66f529e8e2c0" name="qt-debuginfo" arch="x86_64">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="1435aa5ab8b21e05f6a2d2297916731a7abcac7d3999246d1832ef89f9938784" name="qt-demos" arch="i686">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="ba0287da828d5db575c2bc508001fac0307405aad90866c1a80ee50434a26c71" name="qt-demos" arch="x86_64">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="50faf6c44de342756cd0cd485a33879474f5db4e503cf574cb33cc83d5234e92" name="qt-devel" arch="i686">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="95d509dfd0401cf939a97810f491a24815beaf24d5101beddea5f5586897a902" name="qt-devel" arch="x86_64">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="bc544d818a781f30c5d160d6361621e8b1515b14c3686329210523f76d2459c8" name="qt-devel-private" arch="noarch">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="cc260c858fceabe8f9b072214685a9b6b19fb9a747198642079798bc17fd3f97" name="qt-devel-private" arch="noarch">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="1f9f6b09d684c594ae269b72d851d94d8689daa3d8d99c49efaeb9b10e88db46" name="qt-doc" arch="noarch">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="87937b5d366c8a3180f5d37c8272ccf94623e79d8ccc56b2ab6c80dc3e801d43" name="qt-doc" arch="noarch">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="5e87f95fd371cda0a0a7c05af1415527754bc4b6c6f27d2614cf75af4c2ae649" name="qt-examples" arch="i686">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="2369b0eb3ba4101235be32f02de840dcafafa7c4d543156df476ac366e9323fb" name="qt-examples" arch="x86_64">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="8ce49da9dc25a5fb53e6900c77d9d74c5939ccc0240c79c2aadec9a81f8955a6" name="qt-mysql" arch="i686">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="0da76793254e2e8628cdb62e9e2dad61b4529119455a7a8168f6e051b3368fd4" name="qt-mysql" arch="x86_64">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="f078a9f20b5f11e6b45d4de8f95842a28cae931a7740ddb901211ee28b6b7d51" name="qt-odbc" arch="i686">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="e3552e35c150ab495cdd74f71e18c73b968afd49a2cbd1908a0a24efd243f3d3" name="qt-odbc" arch="x86_64">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="b1adb69963dc44f5b79e4140337246bec2239a3e5312cf5b270e2a1964daf412" name="qt-postgresql" arch="i686">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="7dbab2a1cc75dd48adc1455c5cd9595fc9fb3030499ad2339128fbb955f67805" name="qt-postgresql" arch="x86_64">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="0dc59496a98924497603c8afaefa9b6034a4f72086af555afe61e9d99d9555c5" name="qt-qdbusviewer" arch="i686">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="10fd825f8b2fd059e4a72d321fe1e2b29d35a349ff32e4c860679e60db9417cc" name="qt-qdbusviewer" arch="x86_64">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="efcc4e4355c7cc2750e8a11438a5e620ecd116efae173f82321a673532d27c45" name="qt-qvfb" arch="i686">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="0c7b5eacfa3bf8ba5e5eadba1fb4b81ac853858bfeff6beaef4c2c1d69b11cb8" name="qt-qvfb" arch="x86_64">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="3e8fffda5a249763e1397ccaf0209c1b55d8ae79ce7872c003609f6899408681" name="qt-x11" arch="i686">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="f14042b80239f788efa6d4edfd6d175b8db6d083d7be34156fe242b5623a9764" name="qt-x11" arch="x86_64">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="d0bae9f151e86938948ba4d51257b8267f8b08a06c3848e194d1d4d04bc9c1af" name="quagga" arch="i686">
  <version epoch="0" ver="0.99.22.4" rel="5.el7_4"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.1-7" date="1371816000">- quagga is service which might implement networking, thus it should not have
  WantedBy=network.target in its systemd configuration
- resolves: #976883</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.99.22.1-8" date="1373544000">- drop unused BR in tetex</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 0.99.22.1-9" date="1373630400">- Rebuilt for new net-snmp</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.3-1" date="1375185600">- update to 0.99.22.3
- disable ospfapi and ospfclient
- fix bogus dates in changelog
- resolves : #984532</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.99.22.3-2" date="1375531200">- Perl 5.18 rebuild</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-1" date="1379073600">- update to 0.99.22.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-4" date="1392292800">- fix link to upstream tarball (#1059219)
- reference pidfiles of quagga daemons in service files (#842309)</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 0.99.22.4-5" date="1519041600">- Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing
  certain forms of UPDATE message allowing to crash or potentially execute
  arbitrary code
- Resolves: rhbz#1546015</changelog>
</package>
<package pkgid="d75aeca0089e334794bfee076e474dd2e6da66933377048228b93b7e1bf1e819" name="quagga" arch="src">
  <version epoch="0" ver="0.99.22.4" rel="5.el7_4"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.1-7" date="1371816000">- quagga is service which might implement networking, thus it should not have
  WantedBy=network.target in its systemd configuration
- resolves: #976883</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.99.22.1-8" date="1373544000">- drop unused BR in tetex</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 0.99.22.1-9" date="1373630400">- Rebuilt for new net-snmp</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.3-1" date="1375185600">- update to 0.99.22.3
- disable ospfapi and ospfclient
- fix bogus dates in changelog
- resolves : #984532</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.99.22.3-2" date="1375531200">- Perl 5.18 rebuild</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-1" date="1379073600">- update to 0.99.22.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-4" date="1392292800">- fix link to upstream tarball (#1059219)
- reference pidfiles of quagga daemons in service files (#842309)</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 0.99.22.4-5" date="1519041600">- Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing
  certain forms of UPDATE message allowing to crash or potentially execute
  arbitrary code
- Resolves: rhbz#1546015</changelog>
</package>
<package pkgid="8bf8997eb92f9b81133b2e446302162085f2d37fa51bcb6b818e9e4ef1be5bae" name="quagga" arch="src">
  <version epoch="0" ver="0.99.22.4" rel="5.el7_4"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.1-7" date="1371816000">- quagga is service which might implement networking, thus it should not have
  WantedBy=network.target in its systemd configuration
- resolves: #976883</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.99.22.1-8" date="1373544000">- drop unused BR in tetex</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 0.99.22.1-9" date="1373630400">- Rebuilt for new net-snmp</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.3-1" date="1375185600">- update to 0.99.22.3
- disable ospfapi and ospfclient
- fix bogus dates in changelog
- resolves : #984532</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.99.22.3-2" date="1375531200">- Perl 5.18 rebuild</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-1" date="1379073600">- update to 0.99.22.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-4" date="1392292800">- fix link to upstream tarball (#1059219)
- reference pidfiles of quagga daemons in service files (#842309)</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 0.99.22.4-5" date="1519041600">- Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing
  certain forms of UPDATE message allowing to crash or potentially execute
  arbitrary code
- Resolves: rhbz#1546015</changelog>
</package>
<package pkgid="f5b7455170d3d67c32ca74f8192079fc4fee838419600092ea617a0f6ebe5c16" name="quagga" arch="x86_64">
  <version epoch="0" ver="0.99.22.4" rel="5.el7_4"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.1-7" date="1371816000">- quagga is service which might implement networking, thus it should not have
  WantedBy=network.target in its systemd configuration
- resolves: #976883</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.99.22.1-8" date="1373544000">- drop unused BR in tetex</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 0.99.22.1-9" date="1373630400">- Rebuilt for new net-snmp</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.3-1" date="1375185600">- update to 0.99.22.3
- disable ospfapi and ospfclient
- fix bogus dates in changelog
- resolves : #984532</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.99.22.3-2" date="1375531200">- Perl 5.18 rebuild</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-1" date="1379073600">- update to 0.99.22.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-4" date="1392292800">- fix link to upstream tarball (#1059219)
- reference pidfiles of quagga daemons in service files (#842309)</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 0.99.22.4-5" date="1519041600">- Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing
  certain forms of UPDATE message allowing to crash or potentially execute
  arbitrary code
- Resolves: rhbz#1546015</changelog>
</package>
<package pkgid="391d2ddd706c3b5a4f346d7c9f05edd69af311cb1aac2a395cd459432fe41b4c" name="quagga-contrib" arch="i686">
  <version epoch="0" ver="0.99.22.4" rel="5.el7_4"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.1-7" date="1371816000">- quagga is service which might implement networking, thus it should not have
  WantedBy=network.target in its systemd configuration
- resolves: #976883</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.99.22.1-8" date="1373544000">- drop unused BR in tetex</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 0.99.22.1-9" date="1373630400">- Rebuilt for new net-snmp</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.3-1" date="1375185600">- update to 0.99.22.3
- disable ospfapi and ospfclient
- fix bogus dates in changelog
- resolves : #984532</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.99.22.3-2" date="1375531200">- Perl 5.18 rebuild</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-1" date="1379073600">- update to 0.99.22.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-4" date="1392292800">- fix link to upstream tarball (#1059219)
- reference pidfiles of quagga daemons in service files (#842309)</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 0.99.22.4-5" date="1519041600">- Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing
  certain forms of UPDATE message allowing to crash or potentially execute
  arbitrary code
- Resolves: rhbz#1546015</changelog>
</package>
<package pkgid="a9e4e5645f6246314b6bd96f796d73a31a3bb4773b1b122b92df4c05092b7303" name="quagga-contrib" arch="x86_64">
  <version epoch="0" ver="0.99.22.4" rel="5.el7_4"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.1-7" date="1371816000">- quagga is service which might implement networking, thus it should not have
  WantedBy=network.target in its systemd configuration
- resolves: #976883</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.99.22.1-8" date="1373544000">- drop unused BR in tetex</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 0.99.22.1-9" date="1373630400">- Rebuilt for new net-snmp</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.3-1" date="1375185600">- update to 0.99.22.3
- disable ospfapi and ospfclient
- fix bogus dates in changelog
- resolves : #984532</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.99.22.3-2" date="1375531200">- Perl 5.18 rebuild</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-1" date="1379073600">- update to 0.99.22.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-4" date="1392292800">- fix link to upstream tarball (#1059219)
- reference pidfiles of quagga daemons in service files (#842309)</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 0.99.22.4-5" date="1519041600">- Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing
  certain forms of UPDATE message allowing to crash or potentially execute
  arbitrary code
- Resolves: rhbz#1546015</changelog>
</package>
<package pkgid="3761d8539243e9520a714771bc4ba8ae5bde00de1abda458c49dc80d58a4b61c" name="quagga-debuginfo" arch="i686">
  <version epoch="0" ver="0.99.22.4" rel="5.el7_4"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.1-7" date="1371816000">- quagga is service which might implement networking, thus it should not have
  WantedBy=network.target in its systemd configuration
- resolves: #976883</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.99.22.1-8" date="1373544000">- drop unused BR in tetex</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 0.99.22.1-9" date="1373630400">- Rebuilt for new net-snmp</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.3-1" date="1375185600">- update to 0.99.22.3
- disable ospfapi and ospfclient
- fix bogus dates in changelog
- resolves : #984532</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.99.22.3-2" date="1375531200">- Perl 5.18 rebuild</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-1" date="1379073600">- update to 0.99.22.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-4" date="1392292800">- fix link to upstream tarball (#1059219)
- reference pidfiles of quagga daemons in service files (#842309)</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 0.99.22.4-5" date="1519041600">- Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing
  certain forms of UPDATE message allowing to crash or potentially execute
  arbitrary code
- Resolves: rhbz#1546015</changelog>
</package>
<package pkgid="bb62e81edafb3b681feaaa5f4da59a388361bdcdd8ef004d00cc07481107a3da" name="quagga-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.99.22.4" rel="5.el7_4"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.1-7" date="1371816000">- quagga is service which might implement networking, thus it should not have
  WantedBy=network.target in its systemd configuration
- resolves: #976883</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.99.22.1-8" date="1373544000">- drop unused BR in tetex</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 0.99.22.1-9" date="1373630400">- Rebuilt for new net-snmp</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.3-1" date="1375185600">- update to 0.99.22.3
- disable ospfapi and ospfclient
- fix bogus dates in changelog
- resolves : #984532</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.99.22.3-2" date="1375531200">- Perl 5.18 rebuild</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-1" date="1379073600">- update to 0.99.22.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-4" date="1392292800">- fix link to upstream tarball (#1059219)
- reference pidfiles of quagga daemons in service files (#842309)</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 0.99.22.4-5" date="1519041600">- Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing
  certain forms of UPDATE message allowing to crash or potentially execute
  arbitrary code
- Resolves: rhbz#1546015</changelog>
</package>
<package pkgid="f2f76bea5df2084d353057451f367e78589a47e587dc8f68b00f0f85557f3458" name="quagga-devel" arch="i686">
  <version epoch="0" ver="0.99.22.4" rel="5.el7_4"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.1-7" date="1371816000">- quagga is service which might implement networking, thus it should not have
  WantedBy=network.target in its systemd configuration
- resolves: #976883</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.99.22.1-8" date="1373544000">- drop unused BR in tetex</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 0.99.22.1-9" date="1373630400">- Rebuilt for new net-snmp</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.3-1" date="1375185600">- update to 0.99.22.3
- disable ospfapi and ospfclient
- fix bogus dates in changelog
- resolves : #984532</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.99.22.3-2" date="1375531200">- Perl 5.18 rebuild</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-1" date="1379073600">- update to 0.99.22.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-4" date="1392292800">- fix link to upstream tarball (#1059219)
- reference pidfiles of quagga daemons in service files (#842309)</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 0.99.22.4-5" date="1519041600">- Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing
  certain forms of UPDATE message allowing to crash or potentially execute
  arbitrary code
- Resolves: rhbz#1546015</changelog>
</package>
<package pkgid="b8afcf89ee7932ea41068e2a1c4f41e0752e09b2865b95cbd55db43e36ffe7c7" name="quagga-devel" arch="x86_64">
  <version epoch="0" ver="0.99.22.4" rel="5.el7_4"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.1-7" date="1371816000">- quagga is service which might implement networking, thus it should not have
  WantedBy=network.target in its systemd configuration
- resolves: #976883</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.99.22.1-8" date="1373544000">- drop unused BR in tetex</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 0.99.22.1-9" date="1373630400">- Rebuilt for new net-snmp</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.3-1" date="1375185600">- update to 0.99.22.3
- disable ospfapi and ospfclient
- fix bogus dates in changelog
- resolves : #984532</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.99.22.3-2" date="1375531200">- Perl 5.18 rebuild</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-1" date="1379073600">- update to 0.99.22.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-4" date="1392292800">- fix link to upstream tarball (#1059219)
- reference pidfiles of quagga daemons in service files (#842309)</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 0.99.22.4-5" date="1519041600">- Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing
  certain forms of UPDATE message allowing to crash or potentially execute
  arbitrary code
- Resolves: rhbz#1546015</changelog>
</package>
<package pkgid="abe3a82b11d4c05c87eebc228a5736aaffb6c32540c5b2b62de42df6e65ffeb9" name="rear" arch="i686">
  <version epoch="0" ver="2.00" rel="3.el7_4"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; 1.17.0-2" date="1431518400">- Fix Source tag
Related: #1059196</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-1" date="1442232000">- New upstream release 1.17.2
Related: #1059196</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-2" date="1456228800">- rear does not require syslinux
- changing to arch package so that syslinux is installed
- Resolves: #1283927</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-3" date="1457438400">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
</package>
<package pkgid="bb92a1e8b6e07957fa348fb37b975ef5dc755e7ac2895025f1512eb8bc6de6cd" name="rear" arch="src">
  <version epoch="0" ver="2.00" rel="3.el7_4"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; 1.17.0-2" date="1431518400">- Fix Source tag
Related: #1059196</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-1" date="1442232000">- New upstream release 1.17.2
Related: #1059196</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-2" date="1456228800">- rear does not require syslinux
- changing to arch package so that syslinux is installed
- Resolves: #1283927</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-3" date="1457438400">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
</package>
<package pkgid="188a11c5413ab9ac566bf1e49e3353684bb00a77606a51061a88bae66828d5ff" name="rear" arch="src">
  <version epoch="0" ver="2.00" rel="3.el7_4"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; 1.17.0-2" date="1431518400">- Fix Source tag
Related: #1059196</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-1" date="1442232000">- New upstream release 1.17.2
Related: #1059196</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-2" date="1456228800">- rear does not require syslinux
- changing to arch package so that syslinux is installed
- Resolves: #1283927</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-3" date="1457438400">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
</package>
<package pkgid="e4de69e57e1772c524affc7e555beec919b43992f32c22e54c14762b09f4c630" name="rear" arch="x86_64">
  <version epoch="0" ver="2.00" rel="3.el7_4"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; 1.17.0-2" date="1431518400">- Fix Source tag
Related: #1059196</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-1" date="1442232000">- New upstream release 1.17.2
Related: #1059196</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-2" date="1456228800">- rear does not require syslinux
- changing to arch package so that syslinux is installed
- Resolves: #1283927</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-3" date="1457438400">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
</package>
<package pkgid="4117042c54207342cf5eb3b4f4a46261ad71b38d24dbaa57e16e3a24e55e9952" name="rear" arch="i686">
  <version epoch="0" ver="2.00" rel="4.el7_4"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-1" date="1442232000">- New upstream release 1.17.2
Related: #1059196</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-2" date="1456228800">- rear does not require syslinux
- changing to arch package so that syslinux is installed
- Resolves: #1283927</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-3" date="1457438400">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-4" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
</package>
<package pkgid="85d0c91e70fad861c7c4021c3d0264a0c32bea8a7af4724ac4313c4a17ade3d2" name="rear" arch="src">
  <version epoch="0" ver="2.00" rel="4.el7_4"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-1" date="1442232000">- New upstream release 1.17.2
Related: #1059196</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-2" date="1456228800">- rear does not require syslinux
- changing to arch package so that syslinux is installed
- Resolves: #1283927</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-3" date="1457438400">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-4" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
</package>
<package pkgid="fcb82a89963cd14ca25bbb7fe1c449c31391f44bfe3fcc24b328d48d27a12f2c" name="rear" arch="src">
  <version epoch="0" ver="2.00" rel="4.el7_4"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-1" date="1442232000">- New upstream release 1.17.2
Related: #1059196</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-2" date="1456228800">- rear does not require syslinux
- changing to arch package so that syslinux is installed
- Resolves: #1283927</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-3" date="1457438400">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-4" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
</package>
<package pkgid="9a2aa96a5f1cefc61672110bb194500955f37c9bb9a74335ed5ec91a286247ff" name="rear" arch="x86_64">
  <version epoch="0" ver="2.00" rel="4.el7_4"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-1" date="1442232000">- New upstream release 1.17.2
Related: #1059196</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-2" date="1456228800">- rear does not require syslinux
- changing to arch package so that syslinux is installed
- Resolves: #1283927</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-3" date="1457438400">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-4" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
</package>
<package pkgid="a2f7606ef62c416e8b0fc8db8bcc89320cd251369e61d96f95c0d251770d7666" name="rear" arch="i686">
  <version epoch="0" ver="2.00" rel="5.el7_4"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-2" date="1456228800">- rear does not require syslinux
- changing to arch package so that syslinux is installed
- Resolves: #1283927</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-3" date="1457438400">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-4" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-5" date="1518782400">- Ensure that NetBackup is started automatically upon recovery (PR#1544)
  Also do not kill daemons spawned by sysinit.service at the service's end
  (PR#1610, applies to NetBackup and also to dhclient)
  Resolves #1506231</changelog>
</package>
<package pkgid="9d0de78405af85019016f95a12394ebd8e12cb821412be21f0ddca91b2fd08f4" name="rear" arch="src">
  <version epoch="0" ver="2.00" rel="5.el7_4"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-2" date="1456228800">- rear does not require syslinux
- changing to arch package so that syslinux is installed
- Resolves: #1283927</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-3" date="1457438400">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-4" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-5" date="1518782400">- Ensure that NetBackup is started automatically upon recovery (PR#1544)
  Also do not kill daemons spawned by sysinit.service at the service's end
  (PR#1610, applies to NetBackup and also to dhclient)
  Resolves #1506231</changelog>
</package>
<package pkgid="9608bcb493c6207f4d86ec09ff987c477f83007dfccb11936a4b5ee06cb45e44" name="rear" arch="src">
  <version epoch="0" ver="2.00" rel="5.el7_4"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-2" date="1456228800">- rear does not require syslinux
- changing to arch package so that syslinux is installed
- Resolves: #1283927</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-3" date="1457438400">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-4" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-5" date="1518782400">- Ensure that NetBackup is started automatically upon recovery (PR#1544)
  Also do not kill daemons spawned by sysinit.service at the service's end
  (PR#1610, applies to NetBackup and also to dhclient)
  Resolves #1506231</changelog>
</package>
<package pkgid="ccd8bdaa55f892459e5d08266e9eb89255340dc6c24f86c7022dc176dfd9cfb8" name="rear" arch="x86_64">
  <version epoch="0" ver="2.00" rel="5.el7_4"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-2" date="1456228800">- rear does not require syslinux
- changing to arch package so that syslinux is installed
- Resolves: #1283927</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-3" date="1457438400">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-4" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-5" date="1518782400">- Ensure that NetBackup is started automatically upon recovery (PR#1544)
  Also do not kill daemons spawned by sysinit.service at the service's end
  (PR#1610, applies to NetBackup and also to dhclient)
  Resolves #1506231</changelog>
</package>
<package pkgid="2cd5b6c3218ce2b6332eb7209bcce15776c3ffe5ecae89ae338aa6e344fe1c85" name="rear-debuginfo" arch="i686">
  <version epoch="0" ver="2.00" rel="3.el7_4"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; 1.17.0-2" date="1431518400">- Fix Source tag
Related: #1059196</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-1" date="1442232000">- New upstream release 1.17.2
Related: #1059196</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-2" date="1456228800">- rear does not require syslinux
- changing to arch package so that syslinux is installed
- Resolves: #1283927</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-3" date="1457438400">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
</package>
<package pkgid="23be4cc5c269c5bfe89e9c1ce7f4329061e1ee0d7501726e4123d5fdfec4de88" name="rear-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.00" rel="3.el7_4"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; 1.17.0-2" date="1431518400">- Fix Source tag
Related: #1059196</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-1" date="1442232000">- New upstream release 1.17.2
Related: #1059196</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-2" date="1456228800">- rear does not require syslinux
- changing to arch package so that syslinux is installed
- Resolves: #1283927</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-3" date="1457438400">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
</package>
<package pkgid="168e033715885bcb95dc85ca35638d5b1400b9567e3812566dd11e80d8a460b1" name="rear-debuginfo" arch="i686">
  <version epoch="0" ver="2.00" rel="4.el7_4"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-1" date="1442232000">- New upstream release 1.17.2
Related: #1059196</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-2" date="1456228800">- rear does not require syslinux
- changing to arch package so that syslinux is installed
- Resolves: #1283927</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-3" date="1457438400">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-4" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
</package>
<package pkgid="737c90522dc92653878ad41dab896a255733ee8d575bcf4e8ae643cdee17e33d" name="rear-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.00" rel="4.el7_4"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-1" date="1442232000">- New upstream release 1.17.2
Related: #1059196</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-2" date="1456228800">- rear does not require syslinux
- changing to arch package so that syslinux is installed
- Resolves: #1283927</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-3" date="1457438400">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-4" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
</package>
<package pkgid="3596835ae7f3a815e9328599932e8f912ad10d21a0bd407a92d564b7d3b20b4d" name="rear-debuginfo" arch="i686">
  <version epoch="0" ver="2.00" rel="5.el7_4"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-2" date="1456228800">- rear does not require syslinux
- changing to arch package so that syslinux is installed
- Resolves: #1283927</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-3" date="1457438400">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-4" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-5" date="1518782400">- Ensure that NetBackup is started automatically upon recovery (PR#1544)
  Also do not kill daemons spawned by sysinit.service at the service's end
  (PR#1610, applies to NetBackup and also to dhclient)
  Resolves #1506231</changelog>
</package>
<package pkgid="9d8cbe906235e7369bc07d35b4f3b6935a3a9ccd265adee41abc1287d76bf2c6" name="rear-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.00" rel="5.el7_4"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-2" date="1456228800">- rear does not require syslinux
- changing to arch package so that syslinux is installed
- Resolves: #1283927</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-3" date="1457438400">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-4" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-5" date="1518782400">- Ensure that NetBackup is started automatically upon recovery (PR#1544)
  Also do not kill daemons spawned by sysinit.service at the service's end
  (PR#1610, applies to NetBackup and also to dhclient)
  Resolves #1506231</changelog>
</package>
<package pkgid="36a7f942f54ec9a4e7bec1a2fac98a818328f533fb6230900be6d3386ad39d63" name="resource-agents" arch="i686">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.11"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.7" date="1516190400">- NovaEvacuate: add support for keystone v3 authentication

  Resolves: rhbz#1535394</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.8" date="1516708800">- sap_redhat_cluster_connector: fix unknown gvi function

  Resolves: rhbz#1537444</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.11" date="1519732800">- galera: fix temp logfile rights to support MySQL 10.1.21+

  Resolves: rhbz#1547142</changelog>
</package>
<package pkgid="17d6c33b029b513d71f2b88ee3b07a947a73987f30312c029137331340802184" name="resource-agents" arch="src">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.11"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.7" date="1516190400">- NovaEvacuate: add support for keystone v3 authentication

  Resolves: rhbz#1535394</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.8" date="1516708800">- sap_redhat_cluster_connector: fix unknown gvi function

  Resolves: rhbz#1537444</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.11" date="1519732800">- galera: fix temp logfile rights to support MySQL 10.1.21+

  Resolves: rhbz#1547142</changelog>
</package>
<package pkgid="24046a2a5ec50f4ef79aa3ced6f1aac0127a6cd63d9ae61b60a4408458ba4eab" name="resource-agents" arch="src">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.11"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.7" date="1516190400">- NovaEvacuate: add support for keystone v3 authentication

  Resolves: rhbz#1535394</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.8" date="1516708800">- sap_redhat_cluster_connector: fix unknown gvi function

  Resolves: rhbz#1537444</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.11" date="1519732800">- galera: fix temp logfile rights to support MySQL 10.1.21+

  Resolves: rhbz#1547142</changelog>
</package>
<package pkgid="9c20aaf9a61ed12383df5be61bbd4d3fc62b1178f81c4f37789304c5756c740b" name="resource-agents" arch="x86_64">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.11"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.7" date="1516190400">- NovaEvacuate: add support for keystone v3 authentication

  Resolves: rhbz#1535394</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.8" date="1516708800">- sap_redhat_cluster_connector: fix unknown gvi function

  Resolves: rhbz#1537444</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.11" date="1519732800">- galera: fix temp logfile rights to support MySQL 10.1.21+

  Resolves: rhbz#1547142</changelog>
</package>
<package pkgid="4bda0230abf32bf1ee05c4a8b80c4ae6e1ea2a47aca92d0e127b5592a400b167" name="resource-agents" arch="i686">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-96" date="1493208000">- IPaddr2: add "preferred_lft" parameter for IPv6

  Resolves: rhbz#1445861</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-97" date="1493812800">- systemd: add drop-in for clvmd and LVM to avoid fencing on shutdown

  Resolves: rhbz#1316130</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-99" date="1494936000">- galera: fix bootstrap when cluster has no data

  Resolves: rhbz#1451097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
</package>
<package pkgid="64a8458bcb81474f8818a20ca9fb0db5d7eb89e202f9710fce8475718e232972" name="resource-agents" arch="src">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-96" date="1493208000">- IPaddr2: add "preferred_lft" parameter for IPv6

  Resolves: rhbz#1445861</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-97" date="1493812800">- systemd: add drop-in for clvmd and LVM to avoid fencing on shutdown

  Resolves: rhbz#1316130</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-99" date="1494936000">- galera: fix bootstrap when cluster has no data

  Resolves: rhbz#1451097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
</package>
<package pkgid="b932145d440ac85c8849d752e8da2645d581d9931fcd47432fd64a7544359e87" name="resource-agents" arch="src">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-96" date="1493208000">- IPaddr2: add "preferred_lft" parameter for IPv6

  Resolves: rhbz#1445861</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-97" date="1493812800">- systemd: add drop-in for clvmd and LVM to avoid fencing on shutdown

  Resolves: rhbz#1316130</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-99" date="1494936000">- galera: fix bootstrap when cluster has no data

  Resolves: rhbz#1451097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
</package>
<package pkgid="a9d2d9ef6f7e7fbc4aac869142b37c090d142372e7087b5e7b5e8c4bb06bf195" name="resource-agents" arch="x86_64">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-96" date="1493208000">- IPaddr2: add "preferred_lft" parameter for IPv6

  Resolves: rhbz#1445861</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-97" date="1493812800">- systemd: add drop-in for clvmd and LVM to avoid fencing on shutdown

  Resolves: rhbz#1316130</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-99" date="1494936000">- galera: fix bootstrap when cluster has no data

  Resolves: rhbz#1451097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
</package>
<package pkgid="3b62511d0dd689b9c4804dc1582db93293bafeaa0bc941c5b6c97e611afd7621" name="resource-agents" arch="i686">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-97" date="1493812800">- systemd: add drop-in for clvmd and LVM to avoid fencing on shutdown

  Resolves: rhbz#1316130</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-99" date="1494936000">- galera: fix bootstrap when cluster has no data

  Resolves: rhbz#1451097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
</package>
<package pkgid="204e8b43eba2055ab4e37162f61e4faaa5416b08c111fb333aecc856eaff0fb0" name="resource-agents" arch="src">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-97" date="1493812800">- systemd: add drop-in for clvmd and LVM to avoid fencing on shutdown

  Resolves: rhbz#1316130</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-99" date="1494936000">- galera: fix bootstrap when cluster has no data

  Resolves: rhbz#1451097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
</package>
<package pkgid="61d435be6da6c7bbaedb8796aecc044249543f1501070f9a553d0a97b838941c" name="resource-agents" arch="src">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-97" date="1493812800">- systemd: add drop-in for clvmd and LVM to avoid fencing on shutdown

  Resolves: rhbz#1316130</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-99" date="1494936000">- galera: fix bootstrap when cluster has no data

  Resolves: rhbz#1451097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
</package>
<package pkgid="d5e4204cc76fd884d78d617b61a173f969ef1ef5c48e44ddd52e8bd398d4818e" name="resource-agents" arch="x86_64">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-97" date="1493812800">- systemd: add drop-in for clvmd and LVM to avoid fencing on shutdown

  Resolves: rhbz#1316130</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-99" date="1494936000">- galera: fix bootstrap when cluster has no data

  Resolves: rhbz#1451097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
</package>
<package pkgid="5deca62c8a31d9c05ee5c4fd19ed9add89720f4c0a9f4f6c4c92f90e5f8d5709" name="resource-agents" arch="i686">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
</package>
<package pkgid="7ae9649cddc626857f99af21942473a50eb47f1185f3aa0c3c83b7f0956f36ec" name="resource-agents" arch="src">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
</package>
<package pkgid="4164393c2d2ae5653e2d92aa5b1978832a4dc61f7df9512db42adfafbf4f0cbe" name="resource-agents" arch="src">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
</package>
<package pkgid="a61f3c358b19a3c2b44064763d88b63be778663490ed46dd77b0402aac553600" name="resource-agents" arch="x86_64">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
</package>
<package pkgid="f321d2b93a7089a2c8b2aa06b79c6747a671fbb782d0b370ebf07f59a3bc9fa5" name="resource-agents-debuginfo" arch="i686">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.11"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.7" date="1516190400">- NovaEvacuate: add support for keystone v3 authentication

  Resolves: rhbz#1535394</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.8" date="1516708800">- sap_redhat_cluster_connector: fix unknown gvi function

  Resolves: rhbz#1537444</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.11" date="1519732800">- galera: fix temp logfile rights to support MySQL 10.1.21+

  Resolves: rhbz#1547142</changelog>
</package>
<package pkgid="c0d841f80db3f823e72d510cb2e79e5728ceb9ab7a2170703af88829751b0c40" name="resource-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.11"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.7" date="1516190400">- NovaEvacuate: add support for keystone v3 authentication

  Resolves: rhbz#1535394</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.8" date="1516708800">- sap_redhat_cluster_connector: fix unknown gvi function

  Resolves: rhbz#1537444</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.11" date="1519732800">- galera: fix temp logfile rights to support MySQL 10.1.21+

  Resolves: rhbz#1547142</changelog>
</package>
<package pkgid="fa6bcdcb284b3098586d94e45c075587f9f11d2febe7c4ea9d4928dd2c6e59bd" name="resource-agents-debuginfo" arch="i686">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-96" date="1493208000">- IPaddr2: add "preferred_lft" parameter for IPv6

  Resolves: rhbz#1445861</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-97" date="1493812800">- systemd: add drop-in for clvmd and LVM to avoid fencing on shutdown

  Resolves: rhbz#1316130</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-99" date="1494936000">- galera: fix bootstrap when cluster has no data

  Resolves: rhbz#1451097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
</package>
<package pkgid="5c220ca811c53d2800ba3d86f2cb05daffac3ddcd42daadab8d83f89f3f90cd4" name="resource-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-96" date="1493208000">- IPaddr2: add "preferred_lft" parameter for IPv6

  Resolves: rhbz#1445861</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-97" date="1493812800">- systemd: add drop-in for clvmd and LVM to avoid fencing on shutdown

  Resolves: rhbz#1316130</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-99" date="1494936000">- galera: fix bootstrap when cluster has no data

  Resolves: rhbz#1451097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
</package>
<package pkgid="396e7549a75b9c0a11b4ce72c92c248fc52b40c46a99c1a85edef91d22c47d04" name="resource-agents-debuginfo" arch="i686">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-97" date="1493812800">- systemd: add drop-in for clvmd and LVM to avoid fencing on shutdown

  Resolves: rhbz#1316130</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-99" date="1494936000">- galera: fix bootstrap when cluster has no data

  Resolves: rhbz#1451097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
</package>
<package pkgid="f1e779a44f60b3d0a76cc38f48d4e464239b9c6f866b21d499454131d54b2156" name="resource-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-97" date="1493812800">- systemd: add drop-in for clvmd and LVM to avoid fencing on shutdown

  Resolves: rhbz#1316130</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-99" date="1494936000">- galera: fix bootstrap when cluster has no data

  Resolves: rhbz#1451097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
</package>
<package pkgid="3d81a687f055acd7b19e64078bae97e412cd2101866bd0c39596b82795039f19" name="resource-agents-debuginfo" arch="i686">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
</package>
<package pkgid="8529074fed71be6b1f25d85ff6d2db74f59093dd915765fddaba265fb06c0e54" name="resource-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
</package>
<package pkgid="01c9b59afab62961d58c59e240df9eb90d0f71645dd1f50dc9bfd5829fced645" name="resource-agents-sap" arch="x86_64">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.11"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.7" date="1516190400">- NovaEvacuate: add support for keystone v3 authentication

  Resolves: rhbz#1535394</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.8" date="1516708800">- sap_redhat_cluster_connector: fix unknown gvi function

  Resolves: rhbz#1537444</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.11" date="1519732800">- galera: fix temp logfile rights to support MySQL 10.1.21+

  Resolves: rhbz#1547142</changelog>
</package>
<package pkgid="f1b677b8a5b2420915f891e616e116da6af911dd7963fc0ba8848d0c2ca9544b" name="resource-agents-sap" arch="x86_64">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-96" date="1493208000">- IPaddr2: add "preferred_lft" parameter for IPv6

  Resolves: rhbz#1445861</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-97" date="1493812800">- systemd: add drop-in for clvmd and LVM to avoid fencing on shutdown

  Resolves: rhbz#1316130</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-99" date="1494936000">- galera: fix bootstrap when cluster has no data

  Resolves: rhbz#1451097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
</package>
<package pkgid="fbd3b1c4370b36c0fda314c9ab68a35df0c213409296cb3665ee6d1197c0311b" name="resource-agents-sap" arch="x86_64">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-97" date="1493812800">- systemd: add drop-in for clvmd and LVM to avoid fencing on shutdown

  Resolves: rhbz#1316130</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-99" date="1494936000">- galera: fix bootstrap when cluster has no data

  Resolves: rhbz#1451097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
</package>
<package pkgid="f60d38067550a7adb31699cbb9b3709d228b9a593993d8cd0e941ae03451730d" name="resource-agents-sap" arch="x86_64">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
</package>
<package pkgid="e60f56f7b02af7461ec7302f37350682bc2df8baf280bc4439d3cdefd07d5534" name="resource-agents-sap-hana" arch="x86_64">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.11"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.7" date="1516190400">- NovaEvacuate: add support for keystone v3 authentication

  Resolves: rhbz#1535394</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.8" date="1516708800">- sap_redhat_cluster_connector: fix unknown gvi function

  Resolves: rhbz#1537444</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.11" date="1519732800">- galera: fix temp logfile rights to support MySQL 10.1.21+

  Resolves: rhbz#1547142</changelog>
</package>
<package pkgid="9c6f9376f2d37da4f6dd30794b06a041b2d92159b24ced47060016838849f717" name="resource-agents-sap-hana" arch="x86_64">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-96" date="1493208000">- IPaddr2: add "preferred_lft" parameter for IPv6

  Resolves: rhbz#1445861</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-97" date="1493812800">- systemd: add drop-in for clvmd and LVM to avoid fencing on shutdown

  Resolves: rhbz#1316130</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-99" date="1494936000">- galera: fix bootstrap when cluster has no data

  Resolves: rhbz#1451097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
</package>
<package pkgid="9805f35d61230e6c6ea0adf53b11de7900f23e8808ce290dff9134c86dad9f10" name="resource-agents-sap-hana" arch="x86_64">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-97" date="1493812800">- systemd: add drop-in for clvmd and LVM to avoid fencing on shutdown

  Resolves: rhbz#1316130</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-99" date="1494936000">- galera: fix bootstrap when cluster has no data

  Resolves: rhbz#1451097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
</package>
<package pkgid="7f1e8ebac475eb1a5688f2b58e4ebe445d9693cf509ac88a7047bb1d2fe6e753" name="resource-agents-sap-hana" arch="x86_64">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
</package>
<package pkgid="d7fee2b8edc7107c3cc985b46e2762f667dbfad620a7a4646909672a8e006e88" name="rhnsd" arch="i686">
  <version epoch="0" ver="5.0.13" rel="7.1.el7_4"/>
  <changelog author="Jan Pazdziora 5.0.8-1" date="1354276800">- Revert "876328 - updating rhel client tools translations"</changelog>
  <changelog author="Milan Zazrivec &lt;mzazrivec@redhat.com&gt; 5.0.9-1" date="1360929600">- Update .po and .pot files for rhnsd.
- New translations from Transifex for rhnsd.
- Download translations from Transifex for rhnsd.</changelog>
  <changelog author="Michael Mraka &lt;michael.mraka@redhat.com&gt; 5.0.10-1" date="1366891200">- let rhnsd.service be enabled after installation
- Purging %changelog entries preceding Spacewalk 1.0, in active packages.</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.11-1" date="1369137600">- branding clean-up of rhel client stuff</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.12-1" date="1371470400">- rebranding few more strings in client stuff</changelog>
  <changelog author="Michael Mraka &lt;michael.mraka@redhat.com&gt; 5.0.13-1" date="1371470401">- removed old CVS/SVN version ids</changelog>
  <changelog author="Grant Gainey 5.0.13-5" date="1435233600">- Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
- Related: #1138939 - up2date and systemid files are managed by rhnsd itself,
  no need to break init script if they do not exist (jdobes@redhat.com)
- Related: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)
- Revert changes in order to clean up tagging issues with brew
  (ggainey@redhat.com)
- Automatic commit of package [rhnsd] minor release [5.0.13-4-el7].
  (ggainey@redhat.com)
- Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
- Automatic commit of package [rhnsd] minor release [5.0.13-2-el7].
  (ggainey@redhat.com)
- Resolves: #1138939 - up2date and systemid files are managed by rhnsd itself,
  no need to break init script if they do not exist (jdobes@redhat.com)
- Resolves: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-6" date="1488801600">- 1409562 - RHEL7 rhnsd reload doesn't work (jdostal@redhat.com)
- 1409562 - Reboot loop - rhn_check, rhnsd (jdostal@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-7" date="1488801601">- Resolves: #1409562 - fix BZ IDs in spec file (galt@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-7.1" date="1505217600">- Resolves: #1489119 - change permissions for rhnsd.pid (galt@redhat.com)</changelog>
</package>
<package pkgid="23616e2c44b8e20c40bf33faaae7cd3b63afa0f5ff342083c7fd8aec47ef8b44" name="rhnsd" arch="src">
  <version epoch="0" ver="5.0.13" rel="7.1.el7_4"/>
  <changelog author="Jan Pazdziora 5.0.8-1" date="1354276800">- Revert "876328 - updating rhel client tools translations"</changelog>
  <changelog author="Milan Zazrivec &lt;mzazrivec@redhat.com&gt; 5.0.9-1" date="1360929600">- Update .po and .pot files for rhnsd.
- New translations from Transifex for rhnsd.
- Download translations from Transifex for rhnsd.</changelog>
  <changelog author="Michael Mraka &lt;michael.mraka@redhat.com&gt; 5.0.10-1" date="1366891200">- let rhnsd.service be enabled after installation
- Purging %changelog entries preceding Spacewalk 1.0, in active packages.</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.11-1" date="1369137600">- branding clean-up of rhel client stuff</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.12-1" date="1371470400">- rebranding few more strings in client stuff</changelog>
  <changelog author="Michael Mraka &lt;michael.mraka@redhat.com&gt; 5.0.13-1" date="1371470401">- removed old CVS/SVN version ids</changelog>
  <changelog author="Grant Gainey 5.0.13-5" date="1435233600">- Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
- Related: #1138939 - up2date and systemid files are managed by rhnsd itself,
  no need to break init script if they do not exist (jdobes@redhat.com)
- Related: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)
- Revert changes in order to clean up tagging issues with brew
  (ggainey@redhat.com)
- Automatic commit of package [rhnsd] minor release [5.0.13-4-el7].
  (ggainey@redhat.com)
- Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
- Automatic commit of package [rhnsd] minor release [5.0.13-2-el7].
  (ggainey@redhat.com)
- Resolves: #1138939 - up2date and systemid files are managed by rhnsd itself,
  no need to break init script if they do not exist (jdobes@redhat.com)
- Resolves: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-6" date="1488801600">- 1409562 - RHEL7 rhnsd reload doesn't work (jdostal@redhat.com)
- 1409562 - Reboot loop - rhn_check, rhnsd (jdostal@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-7" date="1488801601">- Resolves: #1409562 - fix BZ IDs in spec file (galt@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-7.1" date="1505217600">- Resolves: #1489119 - change permissions for rhnsd.pid (galt@redhat.com)</changelog>
</package>
<package pkgid="8ff10f65e53265bd24529a052109f15fc5c96cb29d62333e0b48c87b850bad8a" name="rhnsd" arch="src">
  <version epoch="0" ver="5.0.13" rel="7.1.el7_4"/>
  <changelog author="Jan Pazdziora 5.0.8-1" date="1354276800">- Revert "876328 - updating rhel client tools translations"</changelog>
  <changelog author="Milan Zazrivec &lt;mzazrivec@redhat.com&gt; 5.0.9-1" date="1360929600">- Update .po and .pot files for rhnsd.
- New translations from Transifex for rhnsd.
- Download translations from Transifex for rhnsd.</changelog>
  <changelog author="Michael Mraka &lt;michael.mraka@redhat.com&gt; 5.0.10-1" date="1366891200">- let rhnsd.service be enabled after installation
- Purging %changelog entries preceding Spacewalk 1.0, in active packages.</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.11-1" date="1369137600">- branding clean-up of rhel client stuff</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.12-1" date="1371470400">- rebranding few more strings in client stuff</changelog>
  <changelog author="Michael Mraka &lt;michael.mraka@redhat.com&gt; 5.0.13-1" date="1371470401">- removed old CVS/SVN version ids</changelog>
  <changelog author="Grant Gainey 5.0.13-5" date="1435233600">- Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
- Related: #1138939 - up2date and systemid files are managed by rhnsd itself,
  no need to break init script if they do not exist (jdobes@redhat.com)
- Related: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)
- Revert changes in order to clean up tagging issues with brew
  (ggainey@redhat.com)
- Automatic commit of package [rhnsd] minor release [5.0.13-4-el7].
  (ggainey@redhat.com)
- Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
- Automatic commit of package [rhnsd] minor release [5.0.13-2-el7].
  (ggainey@redhat.com)
- Resolves: #1138939 - up2date and systemid files are managed by rhnsd itself,
  no need to break init script if they do not exist (jdobes@redhat.com)
- Resolves: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-6" date="1488801600">- 1409562 - RHEL7 rhnsd reload doesn't work (jdostal@redhat.com)
- 1409562 - Reboot loop - rhn_check, rhnsd (jdostal@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-7" date="1488801601">- Resolves: #1409562 - fix BZ IDs in spec file (galt@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-7.1" date="1505217600">- Resolves: #1489119 - change permissions for rhnsd.pid (galt@redhat.com)</changelog>
</package>
<package pkgid="982658093630569e92640a38929741c301e487d3dee4a963d9b812ec4ec2ce77" name="rhnsd" arch="x86_64">
  <version epoch="0" ver="5.0.13" rel="7.1.el7_4"/>
  <changelog author="Jan Pazdziora 5.0.8-1" date="1354276800">- Revert "876328 - updating rhel client tools translations"</changelog>
  <changelog author="Milan Zazrivec &lt;mzazrivec@redhat.com&gt; 5.0.9-1" date="1360929600">- Update .po and .pot files for rhnsd.
- New translations from Transifex for rhnsd.
- Download translations from Transifex for rhnsd.</changelog>
  <changelog author="Michael Mraka &lt;michael.mraka@redhat.com&gt; 5.0.10-1" date="1366891200">- let rhnsd.service be enabled after installation
- Purging %changelog entries preceding Spacewalk 1.0, in active packages.</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.11-1" date="1369137600">- branding clean-up of rhel client stuff</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.12-1" date="1371470400">- rebranding few more strings in client stuff</changelog>
  <changelog author="Michael Mraka &lt;michael.mraka@redhat.com&gt; 5.0.13-1" date="1371470401">- removed old CVS/SVN version ids</changelog>
  <changelog author="Grant Gainey 5.0.13-5" date="1435233600">- Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
- Related: #1138939 - up2date and systemid files are managed by rhnsd itself,
  no need to break init script if they do not exist (jdobes@redhat.com)
- Related: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)
- Revert changes in order to clean up tagging issues with brew
  (ggainey@redhat.com)
- Automatic commit of package [rhnsd] minor release [5.0.13-4-el7].
  (ggainey@redhat.com)
- Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
- Automatic commit of package [rhnsd] minor release [5.0.13-2-el7].
  (ggainey@redhat.com)
- Resolves: #1138939 - up2date and systemid files are managed by rhnsd itself,
  no need to break init script if they do not exist (jdobes@redhat.com)
- Resolves: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-6" date="1488801600">- 1409562 - RHEL7 rhnsd reload doesn't work (jdostal@redhat.com)
- 1409562 - Reboot loop - rhn_check, rhnsd (jdostal@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-7" date="1488801601">- Resolves: #1409562 - fix BZ IDs in spec file (galt@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-7.1" date="1505217600">- Resolves: #1489119 - change permissions for rhnsd.pid (galt@redhat.com)</changelog>
</package>
<package pkgid="06056ac48f1cc63995166b5649eb815f8145f9c48dab54b2ee4cb65c3ace4ca2" name="rhnsd" arch="i686">
  <version epoch="0" ver="5.0.13" rel="7.3.el7_4"/>
  <changelog author="Michael Mraka &lt;michael.mraka@redhat.com&gt; 5.0.10-1" date="1366891200">- let rhnsd.service be enabled after installation
- Purging %changelog entries preceding Spacewalk 1.0, in active packages.</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.11-1" date="1369137600">- branding clean-up of rhel client stuff</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.12-1" date="1371470400">- rebranding few more strings in client stuff</changelog>
  <changelog author="Michael Mraka &lt;michael.mraka@redhat.com&gt; 5.0.13-1" date="1371470401">- removed old CVS/SVN version ids</changelog>
  <changelog author="Grant Gainey 5.0.13-5" date="1435233600">- Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
- Related: #1138939 - up2date and systemid files are managed by rhnsd itself,
  no need to break init script if they do not exist (jdobes@redhat.com)
- Related: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)
- Revert changes in order to clean up tagging issues with brew
  (ggainey@redhat.com)
- Automatic commit of package [rhnsd] minor release [5.0.13-4-el7].
  (ggainey@redhat.com)
- Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
- Automatic commit of package [rhnsd] minor release [5.0.13-2-el7].
  (ggainey@redhat.com)
- Resolves: #1138939 - up2date and systemid files are managed by rhnsd itself,
  no need to break init script if they do not exist (jdobes@redhat.com)
- Resolves: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-6" date="1488801600">- 1409562 - RHEL7 rhnsd reload doesn't work (jdostal@redhat.com)
- 1409562 - Reboot loop - rhn_check, rhnsd (jdostal@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-7" date="1488801601">- Resolves: #1409562 - fix BZ IDs in spec file (galt@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-7.1" date="1505217600">- Resolves: #1489119 - change permissions for rhnsd.pid (galt@redhat.com)</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.13-7.2" date="1509451200">- Resolves: #1506911 - close and reopen syslog when redirecting child output
  (martin.matuska@axelspringer.de)</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.13-7.3" date="1509451201">- Resolves: #1506910 - umask(0) does not reset to default umask
  (tkasparek@redhat.com)</changelog>
</package>
<package pkgid="63f75967b533ac7bffaafcc059eada518e869967b1b39e24f38555e896b6660b" name="rhnsd" arch="src">
  <version epoch="0" ver="5.0.13" rel="7.3.el7_4"/>
  <changelog author="Michael Mraka &lt;michael.mraka@redhat.com&gt; 5.0.10-1" date="1366891200">- let rhnsd.service be enabled after installation
- Purging %changelog entries preceding Spacewalk 1.0, in active packages.</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.11-1" date="1369137600">- branding clean-up of rhel client stuff</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.12-1" date="1371470400">- rebranding few more strings in client stuff</changelog>
  <changelog author="Michael Mraka &lt;michael.mraka@redhat.com&gt; 5.0.13-1" date="1371470401">- removed old CVS/SVN version ids</changelog>
  <changelog author="Grant Gainey 5.0.13-5" date="1435233600">- Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
- Related: #1138939 - up2date and systemid files are managed by rhnsd itself,
  no need to break init script if they do not exist (jdobes@redhat.com)
- Related: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)
- Revert changes in order to clean up tagging issues with brew
  (ggainey@redhat.com)
- Automatic commit of package [rhnsd] minor release [5.0.13-4-el7].
  (ggainey@redhat.com)
- Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
- Automatic commit of package [rhnsd] minor release [5.0.13-2-el7].
  (ggainey@redhat.com)
- Resolves: #1138939 - up2date and systemid files are managed by rhnsd itself,
  no need to break init script if they do not exist (jdobes@redhat.com)
- Resolves: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-6" date="1488801600">- 1409562 - RHEL7 rhnsd reload doesn't work (jdostal@redhat.com)
- 1409562 - Reboot loop - rhn_check, rhnsd (jdostal@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-7" date="1488801601">- Resolves: #1409562 - fix BZ IDs in spec file (galt@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-7.1" date="1505217600">- Resolves: #1489119 - change permissions for rhnsd.pid (galt@redhat.com)</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.13-7.2" date="1509451200">- Resolves: #1506911 - close and reopen syslog when redirecting child output
  (martin.matuska@axelspringer.de)</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.13-7.3" date="1509451201">- Resolves: #1506910 - umask(0) does not reset to default umask
  (tkasparek@redhat.com)</changelog>
</package>
<package pkgid="b4cb1789a4d0be240f02885e54a5a166f2d0a3dc62c488e52175cef30b26f418" name="rhnsd" arch="src">
  <version epoch="0" ver="5.0.13" rel="7.3.el7_4"/>
  <changelog author="Michael Mraka &lt;michael.mraka@redhat.com&gt; 5.0.10-1" date="1366891200">- let rhnsd.service be enabled after installation
- Purging %changelog entries preceding Spacewalk 1.0, in active packages.</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.11-1" date="1369137600">- branding clean-up of rhel client stuff</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.12-1" date="1371470400">- rebranding few more strings in client stuff</changelog>
  <changelog author="Michael Mraka &lt;michael.mraka@redhat.com&gt; 5.0.13-1" date="1371470401">- removed old CVS/SVN version ids</changelog>
  <changelog author="Grant Gainey 5.0.13-5" date="1435233600">- Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
- Related: #1138939 - up2date and systemid files are managed by rhnsd itself,
  no need to break init script if they do not exist (jdobes@redhat.com)
- Related: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)
- Revert changes in order to clean up tagging issues with brew
  (ggainey@redhat.com)
- Automatic commit of package [rhnsd] minor release [5.0.13-4-el7].
  (ggainey@redhat.com)
- Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
- Automatic commit of package [rhnsd] minor release [5.0.13-2-el7].
  (ggainey@redhat.com)
- Resolves: #1138939 - up2date and systemid files are managed by rhnsd itself,
  no need to break init script if they do not exist (jdobes@redhat.com)
- Resolves: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-6" date="1488801600">- 1409562 - RHEL7 rhnsd reload doesn't work (jdostal@redhat.com)
- 1409562 - Reboot loop - rhn_check, rhnsd (jdostal@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-7" date="1488801601">- Resolves: #1409562 - fix BZ IDs in spec file (galt@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-7.1" date="1505217600">- Resolves: #1489119 - change permissions for rhnsd.pid (galt@redhat.com)</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.13-7.2" date="1509451200">- Resolves: #1506911 - close and reopen syslog when redirecting child output
  (martin.matuska@axelspringer.de)</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.13-7.3" date="1509451201">- Resolves: #1506910 - umask(0) does not reset to default umask
  (tkasparek@redhat.com)</changelog>
</package>
<package pkgid="fd310a8a8d45622796a83932f033c20dd1ca0ccf8093e11f8fda948ca8eabc0d" name="rhnsd" arch="x86_64">
  <version epoch="0" ver="5.0.13" rel="7.3.el7_4"/>
  <changelog author="Michael Mraka &lt;michael.mraka@redhat.com&gt; 5.0.10-1" date="1366891200">- let rhnsd.service be enabled after installation
- Purging %changelog entries preceding Spacewalk 1.0, in active packages.</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.11-1" date="1369137600">- branding clean-up of rhel client stuff</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.12-1" date="1371470400">- rebranding few more strings in client stuff</changelog>
  <changelog author="Michael Mraka &lt;michael.mraka@redhat.com&gt; 5.0.13-1" date="1371470401">- removed old CVS/SVN version ids</changelog>
  <changelog author="Grant Gainey 5.0.13-5" date="1435233600">- Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
- Related: #1138939 - up2date and systemid files are managed by rhnsd itself,
  no need to break init script if they do not exist (jdobes@redhat.com)
- Related: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)
- Revert changes in order to clean up tagging issues with brew
  (ggainey@redhat.com)
- Automatic commit of package [rhnsd] minor release [5.0.13-4-el7].
  (ggainey@redhat.com)
- Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
- Automatic commit of package [rhnsd] minor release [5.0.13-2-el7].
  (ggainey@redhat.com)
- Resolves: #1138939 - up2date and systemid files are managed by rhnsd itself,
  no need to break init script if they do not exist (jdobes@redhat.com)
- Resolves: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-6" date="1488801600">- 1409562 - RHEL7 rhnsd reload doesn't work (jdostal@redhat.com)
- 1409562 - Reboot loop - rhn_check, rhnsd (jdostal@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-7" date="1488801601">- Resolves: #1409562 - fix BZ IDs in spec file (galt@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-7.1" date="1505217600">- Resolves: #1489119 - change permissions for rhnsd.pid (galt@redhat.com)</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.13-7.2" date="1509451200">- Resolves: #1506911 - close and reopen syslog when redirecting child output
  (martin.matuska@axelspringer.de)</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.13-7.3" date="1509451201">- Resolves: #1506910 - umask(0) does not reset to default umask
  (tkasparek@redhat.com)</changelog>
</package>
<package pkgid="d3cda79246bf00584e4643ce2c3cca715115becea6e078337c4cc342f13e17c6" name="rhnsd-debuginfo" arch="i686">
  <version epoch="0" ver="5.0.13" rel="7.1.el7_4"/>
  <changelog author="Jan Pazdziora 5.0.8-1" date="1354276800">- Revert "876328 - updating rhel client tools translations"</changelog>
  <changelog author="Milan Zazrivec &lt;mzazrivec@redhat.com&gt; 5.0.9-1" date="1360929600">- Update .po and .pot files for rhnsd.
- New translations from Transifex for rhnsd.
- Download translations from Transifex for rhnsd.</changelog>
  <changelog author="Michael Mraka &lt;michael.mraka@redhat.com&gt; 5.0.10-1" date="1366891200">- let rhnsd.service be enabled after installation
- Purging %changelog entries preceding Spacewalk 1.0, in active packages.</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.11-1" date="1369137600">- branding clean-up of rhel client stuff</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.12-1" date="1371470400">- rebranding few more strings in client stuff</changelog>
  <changelog author="Michael Mraka &lt;michael.mraka@redhat.com&gt; 5.0.13-1" date="1371470401">- removed old CVS/SVN version ids</changelog>
  <changelog author="Grant Gainey 5.0.13-5" date="1435233600">- Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
- Related: #1138939 - up2date and systemid files are managed by rhnsd itself,
  no need to break init script if they do not exist (jdobes@redhat.com)
- Related: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)
- Revert changes in order to clean up tagging issues with brew
  (ggainey@redhat.com)
- Automatic commit of package [rhnsd] minor release [5.0.13-4-el7].
  (ggainey@redhat.com)
- Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
- Automatic commit of package [rhnsd] minor release [5.0.13-2-el7].
  (ggainey@redhat.com)
- Resolves: #1138939 - up2date and systemid files are managed by rhnsd itself,
  no need to break init script if they do not exist (jdobes@redhat.com)
- Resolves: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-6" date="1488801600">- 1409562 - RHEL7 rhnsd reload doesn't work (jdostal@redhat.com)
- 1409562 - Reboot loop - rhn_check, rhnsd (jdostal@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-7" date="1488801601">- Resolves: #1409562 - fix BZ IDs in spec file (galt@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-7.1" date="1505217600">- Resolves: #1489119 - change permissions for rhnsd.pid (galt@redhat.com)</changelog>
</package>
<package pkgid="2fccc5552d7289882939b33c7d0f3bc3b11294e75d7082b6e06901f0eeffe005" name="rhnsd-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.0.13" rel="7.1.el7_4"/>
  <changelog author="Jan Pazdziora 5.0.8-1" date="1354276800">- Revert "876328 - updating rhel client tools translations"</changelog>
  <changelog author="Milan Zazrivec &lt;mzazrivec@redhat.com&gt; 5.0.9-1" date="1360929600">- Update .po and .pot files for rhnsd.
- New translations from Transifex for rhnsd.
- Download translations from Transifex for rhnsd.</changelog>
  <changelog author="Michael Mraka &lt;michael.mraka@redhat.com&gt; 5.0.10-1" date="1366891200">- let rhnsd.service be enabled after installation
- Purging %changelog entries preceding Spacewalk 1.0, in active packages.</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.11-1" date="1369137600">- branding clean-up of rhel client stuff</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.12-1" date="1371470400">- rebranding few more strings in client stuff</changelog>
  <changelog author="Michael Mraka &lt;michael.mraka@redhat.com&gt; 5.0.13-1" date="1371470401">- removed old CVS/SVN version ids</changelog>
  <changelog author="Grant Gainey 5.0.13-5" date="1435233600">- Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
- Related: #1138939 - up2date and systemid files are managed by rhnsd itself,
  no need to break init script if they do not exist (jdobes@redhat.com)
- Related: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)
- Revert changes in order to clean up tagging issues with brew
  (ggainey@redhat.com)
- Automatic commit of package [rhnsd] minor release [5.0.13-4-el7].
  (ggainey@redhat.com)
- Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
- Automatic commit of package [rhnsd] minor release [5.0.13-2-el7].
  (ggainey@redhat.com)
- Resolves: #1138939 - up2date and systemid files are managed by rhnsd itself,
  no need to break init script if they do not exist (jdobes@redhat.com)
- Resolves: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-6" date="1488801600">- 1409562 - RHEL7 rhnsd reload doesn't work (jdostal@redhat.com)
- 1409562 - Reboot loop - rhn_check, rhnsd (jdostal@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-7" date="1488801601">- Resolves: #1409562 - fix BZ IDs in spec file (galt@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-7.1" date="1505217600">- Resolves: #1489119 - change permissions for rhnsd.pid (galt@redhat.com)</changelog>
</package>
<package pkgid="efa315e6245f96754ca251240efe066d1835b382fd78757c2c169ad3344f6312" name="rhnsd-debuginfo" arch="i686">
  <version epoch="0" ver="5.0.13" rel="7.3.el7_4"/>
  <changelog author="Michael Mraka &lt;michael.mraka@redhat.com&gt; 5.0.10-1" date="1366891200">- let rhnsd.service be enabled after installation
- Purging %changelog entries preceding Spacewalk 1.0, in active packages.</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.11-1" date="1369137600">- branding clean-up of rhel client stuff</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.12-1" date="1371470400">- rebranding few more strings in client stuff</changelog>
  <changelog author="Michael Mraka &lt;michael.mraka@redhat.com&gt; 5.0.13-1" date="1371470401">- removed old CVS/SVN version ids</changelog>
  <changelog author="Grant Gainey 5.0.13-5" date="1435233600">- Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
- Related: #1138939 - up2date and systemid files are managed by rhnsd itself,
  no need to break init script if they do not exist (jdobes@redhat.com)
- Related: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)
- Revert changes in order to clean up tagging issues with brew
  (ggainey@redhat.com)
- Automatic commit of package [rhnsd] minor release [5.0.13-4-el7].
  (ggainey@redhat.com)
- Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
- Automatic commit of package [rhnsd] minor release [5.0.13-2-el7].
  (ggainey@redhat.com)
- Resolves: #1138939 - up2date and systemid files are managed by rhnsd itself,
  no need to break init script if they do not exist (jdobes@redhat.com)
- Resolves: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-6" date="1488801600">- 1409562 - RHEL7 rhnsd reload doesn't work (jdostal@redhat.com)
- 1409562 - Reboot loop - rhn_check, rhnsd (jdostal@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-7" date="1488801601">- Resolves: #1409562 - fix BZ IDs in spec file (galt@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-7.1" date="1505217600">- Resolves: #1489119 - change permissions for rhnsd.pid (galt@redhat.com)</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.13-7.2" date="1509451200">- Resolves: #1506911 - close and reopen syslog when redirecting child output
  (martin.matuska@axelspringer.de)</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.13-7.3" date="1509451201">- Resolves: #1506910 - umask(0) does not reset to default umask
  (tkasparek@redhat.com)</changelog>
</package>
<package pkgid="1a613d5cd84c1f602c4757b8ca43759db0dc9ccd776ed94e5d4ad0df4b709b63" name="rhnsd-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.0.13" rel="7.3.el7_4"/>
  <changelog author="Michael Mraka &lt;michael.mraka@redhat.com&gt; 5.0.10-1" date="1366891200">- let rhnsd.service be enabled after installation
- Purging %changelog entries preceding Spacewalk 1.0, in active packages.</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.11-1" date="1369137600">- branding clean-up of rhel client stuff</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.12-1" date="1371470400">- rebranding few more strings in client stuff</changelog>
  <changelog author="Michael Mraka &lt;michael.mraka@redhat.com&gt; 5.0.13-1" date="1371470401">- removed old CVS/SVN version ids</changelog>
  <changelog author="Grant Gainey 5.0.13-5" date="1435233600">- Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
- Related: #1138939 - up2date and systemid files are managed by rhnsd itself,
  no need to break init script if they do not exist (jdobes@redhat.com)
- Related: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)
- Revert changes in order to clean up tagging issues with brew
  (ggainey@redhat.com)
- Automatic commit of package [rhnsd] minor release [5.0.13-4-el7].
  (ggainey@redhat.com)
- Bump release to get past weirdness in brew-tags (ggainey@redhat.com)
- Automatic commit of package [rhnsd] minor release [5.0.13-2-el7].
  (ggainey@redhat.com)
- Resolves: #1138939 - up2date and systemid files are managed by rhnsd itself,
  no need to break init script if they do not exist (jdobes@redhat.com)
- Resolves: #1092518 - PIE+RELRO for rhnsd (mkollar@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-6" date="1488801600">- 1409562 - RHEL7 rhnsd reload doesn't work (jdostal@redhat.com)
- 1409562 - Reboot loop - rhn_check, rhnsd (jdostal@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-7" date="1488801601">- Resolves: #1409562 - fix BZ IDs in spec file (galt@redhat.com)</changelog>
  <changelog author="Gennadii Altukhov &lt;galt@redhat.com&gt; 5.0.13-7.1" date="1505217600">- Resolves: #1489119 - change permissions for rhnsd.pid (galt@redhat.com)</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.13-7.2" date="1509451200">- Resolves: #1506911 - close and reopen syslog when redirecting child output
  (martin.matuska@axelspringer.de)</changelog>
  <changelog author="Tomas Kasparek &lt;tkasparek@redhat.com&gt; 5.0.13-7.3" date="1509451201">- Resolves: #1506910 - umask(0) does not reset to default umask
  (tkasparek@redhat.com)</changelog>
</package>
<package pkgid="c8c85bc03d52a886813b61ff3ab4a683533b81d7b0845fbe3631b02f90d89e04" name="ruby" arch="i686">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="f2fa05abe2c056c47cf9388fba0243bcfa7d016246c19e31a82f8c93728fe104" name="ruby" arch="src">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="4ce6960de944277e0f2642afbd08e879f3fb0839bb6a99c10a5a11b911a213ba" name="ruby" arch="src">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="67305999d261612fdc9f7082eb556d47e99d2223b7249838d84449e550336785" name="ruby" arch="src">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="b1337fab03b81690fb9d69cfed06e3f306b0adbe700e242a117443567119f38a" name="ruby" arch="x86_64">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="2b2e43f70e438fee63fc9d69902987ece68770966f9bd4afd428b9e89dfe96dc" name="ruby" arch="x86_64">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="285e104ccf4ecd88393e7a656c4e05bf03e1fb46ebd7038fc2fe1bb0e4942bb2" name="ruby-debuginfo" arch="i686">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="e034720bb0e447c1dc5c2cc1f524f42a669a51a29ed8a1e5a88c6a2bcc49cdd6" name="ruby-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="4f055b9530a60f9ef740f32e220ea24ffe0ae4a8b0983e4d8db4e87a779ee470" name="ruby-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="f23b32dbc4ec33997e9811968c8abc04ab251260104076136791c8bd9a58f700" name="ruby-devel" arch="i686">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="1d9bac3ad9beedfec9f63f91a724b1af248c39e6818f9ec2c1faa814ab34af03" name="ruby-devel" arch="x86_64">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="578a3deda1e0ff0195eab346a8a8d578e9664af4ee62f46399e4e1b4fe181df7" name="ruby-devel" arch="x86_64">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="7a87f9cd3d08340b1f6d751232178b79d73a3ae7f0bf16e3b07184c9f19f4217" name="ruby-doc" arch="noarch">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="7f76494f743ba7650baef25e2d5c6207ed34f11dba850fe1a2a1aed3a6861e2d" name="ruby-doc" arch="noarch">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="047b5dbded499563c21f3c3ef43af2f3453aecb95c7914ca7d4bf7afa23058ec" name="ruby-doc" arch="noarch">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="79b6b128822f1dab9be5117e3f672c4413e73d1a70cba047d3601e295d29fad9" name="ruby-irb" arch="noarch">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="9b90c90b8c5f13627dcc4ba3936631ee601eed171beb83a739dd2c9a19b25004" name="ruby-irb" arch="noarch">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="c28feb3467ffcbc6697225271cf90e28d369a8744e681a9253af8e99a1ae9e13" name="ruby-irb" arch="noarch">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="635d238897deb69ab818f10917374c5b6c080489708483a2c5c5609df34f7bf1" name="ruby-libguestfs" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.50" date="1440936000">- v2v:
  * When debugging, dump OVF to stderr.
  * Ignore missing kernels from grub
    resolves: rhbz#1230412
  * Calculate VMware dcPath correctly (1256823)
  * Map empty VMware network or bridge name to default (1257895)
- p2v:
  * Wait for network to come online before testing connection
    resolves: rhbz#1256222
- Fix tests to run correctly with libguestfs-winsupport 7.2.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.51" date="1441108800">- v2v: Fix handling of extra slashes in dcPath calculation
  resolves: rhbz#1258342 rhbz#1256823
- v2v: Fix -oa preallocation option
  resolves: rhbz#1251909</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
</package>
<package pkgid="526c9948623c5fd05ac8a8d037934a978c12a32b8632bebee8afabab941aae59" name="ruby-libguestfs" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="453c9874ee96b2cd9bfe77130e88850d8d6db1aa983e91dc3cb986a9c5f2ec00" name="ruby-libs" arch="i686">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="695285625981cd1417b57b3f0e2b29c74cb509490e03d0e9c17b7f29e32ad8c9" name="ruby-libs" arch="x86_64">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="b79c15a0254ef501df960c42db1e7b5b155d1e32d76557db15bced962efb6681" name="ruby-libs" arch="x86_64">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="2a53c96167e0627598f6dcc22f8e0ee49510d643de5ba6aca1f35ef483288c3b" name="ruby-tcltk" arch="i686">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="36dcce11d7773966f5bf6abd1a4f8fe1d8acb9936e1b3f6111414b9e6eb2f612" name="ruby-tcltk" arch="x86_64">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="8c737afa6b71e25091681b42b6d763baf287cb440710796b45083203a3b845b7" name="ruby-tcltk" arch="x86_64">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="460c4167f763e1b80c5e53a31d29ebf2d5c5ad2b89d813afd35e610903fcc222" name="rubygem-bigdecimal" arch="i686">
  <version epoch="0" ver="1.2.0" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="c0969612cf8a4e07fea2ab366638a7bc708deda725a75da6b491a6b2eb35ff28" name="rubygem-bigdecimal" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="fdb4cf35232bbcacaa1b068a3295447ea1ea3ad89c55f8f8e0982693b61ceff7" name="rubygem-bigdecimal" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="88ff5d7e6257961ebc9f6a6b8cb1b50b6b93304fe192777eb556d095498f8b9f" name="rubygem-io-console" arch="i686">
  <version epoch="0" ver="0.4.2" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="e4dd6dab29dbaf744f025825145b9bd4e1510eba90ff9985d303cefca141d252" name="rubygem-io-console" arch="x86_64">
  <version epoch="0" ver="0.4.2" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="fc4fee91515cfda8c52629156677aa11326c92ad4a2bc11090726a394b42c7be" name="rubygem-io-console" arch="x86_64">
  <version epoch="0" ver="0.4.2" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="d82465ba64bf110506ca1bf040840493bfc138761094538db38f764ffb70f6ff" name="rubygem-json" arch="i686">
  <version epoch="0" ver="1.7.7" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="ad565885bc69b6e1ede976cfdffbb88ef5a1bf299d182b9a4626ee281714d521" name="rubygem-json" arch="x86_64">
  <version epoch="0" ver="1.7.7" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="ae55277fdb9102ce55864516b81a6423771b7adda89cee621aa927f99556e999" name="rubygem-json" arch="x86_64">
  <version epoch="0" ver="1.7.7" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="578747b76c9027e7f1bb1622037ac5d2ae588845b80717e140401078580ad57c" name="rubygem-minitest" arch="noarch">
  <version epoch="0" ver="4.3.2" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="49769bbd54fc48d50ce313b12dcfd6e451248da2e67642af2f3b801c817b11fa" name="rubygem-minitest" arch="noarch">
  <version epoch="0" ver="4.3.2" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="9d207bd50187eaf69980e7a99c20fba4d2384fc07da2619b3fe536071d72d1ce" name="rubygem-minitest" arch="noarch">
  <version epoch="0" ver="4.3.2" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="1f32c538cf7697ec0f37127f2fa33957065e5619e07d1d09391026992efc3e42" name="rubygem-psych" arch="i686">
  <version epoch="0" ver="2.0.0" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="6d9e63bdc5cff89236a4bd92c01b3144aa7584cdd3da98670897886fa6458f12" name="rubygem-psych" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="7379ba7858ba177877367645100f800a002a99ef560113181aa55220debd9fba" name="rubygem-psych" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="8ff792640dca6088b67f47dd48e8753084de80db72f5bf59ef46e0f127030f02" name="rubygem-rake" arch="noarch">
  <version epoch="0" ver="0.9.6" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="138f88251d5ed906d6f1eaeb1d641634a45f468016bf1a599804c8ab115fc856" name="rubygem-rake" arch="noarch">
  <version epoch="0" ver="0.9.6" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="37443d8f337ab030da9d9d651fc2ba010cade67d486547fd372a00cc07d94407" name="rubygem-rake" arch="noarch">
  <version epoch="0" ver="0.9.6" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="7e250c7445f073beca02e7487551948025e3259a66938208a1e0eec9b1a3735f" name="rubygem-rdoc" arch="noarch">
  <version epoch="0" ver="4.0.0" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="498d0283529cb9746d3ba7915339db38edab7990c9733326b1121b8752a8f961" name="rubygem-rdoc" arch="noarch">
  <version epoch="0" ver="4.0.0" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="dda720f0ae083a3018c95a5cda8113b56d157dca1a51892e510f18792e7a62cb" name="rubygem-rdoc" arch="noarch">
  <version epoch="0" ver="4.0.0" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="23d8baf514a5134f8a41f2fc49d02315eac99217d92adbbcdaba4b4fb4d0f2dd" name="rubygems" arch="noarch">
  <version epoch="0" ver="2.0.14.1" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="599c0a65abda30237cf6830d586b65cc20a296930e54de0687e85972c1ccafcc" name="rubygems" arch="noarch">
  <version epoch="0" ver="2.0.14.1" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="8a4601d24710ad5402e9b619b3aa93c15a2f106ae144d5ef40898a74b0736592" name="rubygems" arch="noarch">
  <version epoch="0" ver="2.0.14.1" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="2d590d99b35f36ad6fe97a24337cdd67f9409e60bd9db6a555818c2f9fe372f8" name="rubygems-devel" arch="noarch">
  <version epoch="0" ver="2.0.14.1" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="32232d03efc2d1538162461a6049c3dd176aaa6fbd1f7251bb88ab5e5aaee25c" name="rubygems-devel" arch="noarch">
  <version epoch="0" ver="2.0.14.1" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="654d49a527d5f8aecd6e2d255232ae9d0921fb852e2c5cc69d2dd7f340bef59d" name="rubygems-devel" arch="noarch">
  <version epoch="0" ver="2.0.14.1" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="251bd8279bc0ffc312dbd33f8418c020c31566fb99c70bc87a62bcd2e3ef0fde" name="samba" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="37567ad13f5168f0573300d73df79f302374f52d28e4652e7b1c1bab4e988351" name="samba" arch="src">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="68952b870e76052c8b6ccf3803b6be9a08801dde348cccd7a5594e0e4aa12760" name="samba" arch="src">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="ffb66e5994af8aa3b4b5db420a1f25964edb1f8e6840c16af61059ec5ba424a7" name="samba" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="b0c4182a7fabfc229e814c512957d2c73b86201eff689221d8e409290f778394" name="samba" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="07f004a324fa22da5375a22656abe06c857e9e0d9aa11339c90151b16ae33827" name="samba" arch="src">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="7ab7123a10f799de1aa4a90575f2981df7187feb5eeb2460bd9be54e5d7b50b5" name="samba" arch="src">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="522bab5c0e69d77fb1a0797e1310c3a5543e307bd8494c0bdffa06b75d1e8a50" name="samba" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="915bb3b8ae87188701d34cb79154223bc56e87da60e600a225a41ead33177345" name="samba" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="5d853fbb3960c92ef259eae525b5bf13cfddb5831a1a93babccd63a9b111c6cb" name="samba" arch="src">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="22f572307d7c68cd2f68a9499496379d383d7106a64f1d8097224577909c5b88" name="samba" arch="src">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="13b749cba892fbe758aebfd5814e1920f474485d459e312f1ce30971c3b796b0" name="samba" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="fac7c2d35508074ec2efb2909825c8ac0ee28886293a24a800c7af07b480f45a" name="samba-client" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="5765f9047225159072c887b1bc40cbbb88977a030b5141c77031785b6b8a1a68" name="samba-client" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="fad3d26ac7cfa82314fdc43df59dc712681705a1aee9a98a0997b30a6792d6b0" name="samba-client" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="6b0e6772a691ec71d3ef4d2d4d0d9b097f943383a3fff22ad25bdccaae7b310c" name="samba-client" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="df45f844a4109f19ed84241d19dd9d28dd0fcf858a3c96ab83bb54640257867d" name="samba-client" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="c8c010b2b586f8ed6ec4449a41ae6a473f3c4fc3842ba7c879bdf6014082247f" name="samba-client" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="f36bd4ecafbe516563a70d58530ad71c5e7372587f8b89d7134306ffba398695" name="samba-client-libs" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="9b281020e2a376aeecdcca6cb2b7925084ac5c94607d7db0b08522d99ff65d41" name="samba-client-libs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="9dc64ed804452c3109ede02f0a22d93e0a2286fb2f3c1f15cdbd7d4c9eda89cc" name="samba-client-libs" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="6dead56eb48f447df860dcf3533100f1c5858afb2d51f320162a9ffb6cc0b03c" name="samba-client-libs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="a969b7058ab53fa83e51d1905e21a1c315db2c6d9c5ace706d28c2a316f45cc3" name="samba-client-libs" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="65a8fd9b0e70e4bca7ca515f33a9ce9147a59997686af416bb07df95db599abe" name="samba-client-libs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="3dffb820550efe60efcd59f2604fd351b71f4ba0949a74425a1fe7b1f2cb7d67" name="samba-common" arch="noarch">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="09dddda0d822ae354580aa43188d2e9e55d71bc647f0f4e40decc9699adccf34" name="samba-common" arch="noarch">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="ec519e1f85e917b95970f4ac3dea89e0011411b47f94dbca7fd19dfbe8dc7bb5" name="samba-common" arch="noarch">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="ae5994285c7dd9a709645c85c2343cacc30073fe01d41217133bb172287fe190" name="samba-common" arch="noarch">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="b74fd452821763d1ef83f9bbd3b1b0375f57b21a191bfe12093c83c72322233b" name="samba-common" arch="noarch">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="cdd327a63c06454fa8aade9177c02e79e4fcfb1a7333f74f5f875df3ae00bc54" name="samba-common" arch="noarch">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="6091612f5a0268a82086dc8ab6d1e14d92d6036f68f7d95a0cecb2515d53e131" name="samba-common-libs" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="7a1e9b824db1a84ebc6499c71510c23339a56961a6b1aca6699cf9e57e47000a" name="samba-common-libs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="60d048877b84508396016b848b9489095f9334ac62d7d2afb579586126c7e2fd" name="samba-common-libs" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="0d34ae18ae21146cd16c77ae130c4f57635fcd73b59f22a75ea86757b8741978" name="samba-common-libs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="52f48eeeefe17216ea689b66a375c60c6bc3628a0ffc5cc489bd1c688d66a9cd" name="samba-common-libs" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="3010dc9798016983c30509b0809783892aa631ec24a682768fa12f5f239dc2a9" name="samba-common-libs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="33b1add5858264977ab4d72b5eed4ee5c5644f3e09458eb462d8e13132f3bbd2" name="samba-common-tools" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="aa625005b7cd4dc2f9fbdfdead51d45cdeebe6b8db1e4a9f9ad2e52c09770f6b" name="samba-common-tools" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="ed54a302cea8128380bbf200db35dfba3b760c5a8eec338b93046825dcc2adac" name="samba-common-tools" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="3c57f9b1f3b742fd7faf53dd9ede7b8b7246e61f5e6e066cf737fb6565601a97" name="samba-common-tools" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="f97bc145b3bf178f214f5c585f8bb19a016cd8553dbccb967c7e680bc8f6a25f" name="samba-common-tools" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="e70b7b054f482254b7d4d6771041937db9d4a29f1eedd42e3d164a2779922110" name="samba-common-tools" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="5ec45a3664fede0bd3650946bfebcbcac55320cc11024675e151693d663d183d" name="samba-dc" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="56a7589376d640bf0def0f09aa4ad0da006890fe623c0642aa43795cc2326e94" name="samba-dc" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="9569f8b9927f1cd29a53e46c6f876d5095d80db27b146e853a71b9fa54c64b13" name="samba-dc" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="dbf89adddfcebe7b404b416cfef030161ed608407ad8e8f14714564e149959a3" name="samba-dc" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="1b4d38c629b774ed8e8af6bbfa54ba8c61ca2f6782aa51daf992bdf08d507930" name="samba-dc" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="76d59c08526bfbed6ce02144365837d961d24b6dafc06a7af7914409853b8998" name="samba-dc" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="8d56febde6d5659af571a9cd469d5d9ceee1bdece4158f0c33a684f1f2f6af9a" name="samba-dc-libs" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="b184681e55602d9af6299cec6e0c28a138c0342cd5c58bb36867cca726e6ab32" name="samba-dc-libs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="b1ad4d13719fcbdcecbc5b2e4a353bb7c06953ecdc8762f9123d29df681b5335" name="samba-dc-libs" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="810528218a9ed71878925a91a09fb38097d7fb6bdc7382b3451502c963e1f996" name="samba-dc-libs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="b531a488087f474506b4eff26b9eafa98ffc45d49c5b73d60588d4d7728e504b" name="samba-dc-libs" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="9d4948b0a25aed3e039f0a39cf716f14d52492c24febbedf13240282e1c55625" name="samba-dc-libs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="73aed58a44d728f7cf8567fa61b1018f271e69fa4320c41ef606d029c6f03387" name="samba-debuginfo" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="5529357d96b62c65b95cfd61c03dd936b2910abeee3bd2e44b537d7373dd0b5e" name="samba-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="be7bb8d999e865d050925762540dbebe6f4c596cceb20374b00a2f703cfa80ed" name="samba-debuginfo" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="39564d1f7ba5486f96a3537a16968634ecc02ebb5dec31345f4f0deebef2538d" name="samba-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="d2fe385d8ea4e6a095d5d5549edd0c8966be8e0488acadfddfca191e7736a6c1" name="samba-debuginfo" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="56ae7d2782de36848fb5b6e6a0204c525d5e36e78ec2ae3ca3034b61a834e1b6" name="samba-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="cbb68d9840fdf0674a5cd50f0bd8c15a763392301f130fe639a1d48726c8debd" name="samba-devel" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="12ccb845ffdfd2f60aaa64499f5291c23afa31cebb958b5a29a546af9c0e5a34" name="samba-devel" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="871a4c0a2e2ee1c22a75eb3e537acb1ba301a5901c9e43149b9a00c54c19490f" name="samba-devel" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="be350966f7b4d7c2d86cc9ec543db54abc927824afba6ef71b4ad441bbe316de" name="samba-devel" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="46e3714be6326e99322c099bfe85ccd8142f423c78cc23cdb8eddff3eff4803c" name="samba-devel" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="06995d05a52aac96ac0254f786f1bde50b0d447a2cff8a5d3663ac3e8bedecb6" name="samba-devel" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="d72b3db32f75243ea14056f7e3f709fb2ab10512a60f66c12c0b0cdd733d1d65" name="samba-krb5-printing" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="ffda6bad09cfb92d4ad047e373a854c43418eae0472794d51974e0f440065946" name="samba-krb5-printing" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="3019e879bef496d0b83a442657a974be9061b44db10d60800446176835b32c1f" name="samba-krb5-printing" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="1613f42edcda1b8f752b686b84d9b16946ce53ab510937a9fa3ca84493dd1a27" name="samba-krb5-printing" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="2a4254391bacfe305319000d3034ecd048142a0c52334a3e618879fd1754e615" name="samba-krb5-printing" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="dcfdc169adac15c053a779f1c3ee61aa0bc0ce4a73dea0e3d85c999140718510" name="samba-krb5-printing" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="b1e371b9d2c583609c00feb8a2f64ccaa823dc63fa447c82fd217f0fbd4b873a" name="samba-libs" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="248a4e33cf08abba666d479fd525c44ea7e92ce454c5661d17973145e4743eaf" name="samba-libs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="0e92ddaa18ffe1c53f62053e27ba4401c9ac56c63c338e84212a83181432e6ac" name="samba-libs" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="fd8ef285031527e64b442d9328aa540b8c4992fd02b9a26fd83a74d956c6ede9" name="samba-libs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="09a33b1af208ee6122f3228be8624038400095da70c3968d10aa8e9c0634d9a4" name="samba-libs" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="0cbbc7653cd44e73d6f0a4e429d09e96902facdb979873785e1ece56f8fec4a2" name="samba-libs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="b8375df32e5e36d113f2a1f886b0568ece5612746a863af834b98dfdde6a026f" name="samba-pidl" arch="noarch">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="13644684665d060620e01167b593e9a558cbfc6600db7feabe75d6fd7433d51f" name="samba-pidl" arch="noarch">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="5a7e5ec14c609e614b97a89917e3901a0f5220df300d6a7bb3d9fa89f3c9ce39" name="samba-pidl" arch="noarch">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="fcd04c1249b538c8aa8a5378faa4399b15ea2fb0f7e3e7039795447c2ba334b4" name="samba-pidl" arch="noarch">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="52344b673d86d465aa912021dcce888116f3b92a31338a2eab8c7ceb5dcc0053" name="samba-pidl" arch="noarch">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="eada764bf6ce89c8232091bd57fafdb4ae3a085d580d5570f4752f2df4649df6" name="samba-pidl" arch="noarch">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="864af8da3d250f743b42d598b6045b38eb70d07e255eac112cfdc15c4bf3bbbf" name="samba-python" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="9eb5377345ed1168722c060580caf2dd519f5a9e3772922a3c6783852cc53274" name="samba-python" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="48a3d122cf94a59417572d212ca4644d0b72c8f8d14c45785f1c0434813bb062" name="samba-python" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="481342c493994a6c39acf1184f56a2cd963aee9fdd9bc60bb71528cf62dd7564" name="samba-python" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="6edf49209f72261a3de37310a241eee6393def0704b1f9fd658fb65903381c8a" name="samba-python" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="3c62a117e90bccb9c12327f17281ad08231c21f146552f64cd5ee3901cf950ea" name="samba-python" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="6744e63e2fa23407002251cf03129dcbf192df180719e67889fd7dd9efa50f0f" name="samba-test" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="197b8e0ae2be20bac8b9c1b92e29ee72b0203582bd45404a9fe6d021f25128da" name="samba-test" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="1a7fc3e26d94587136f5e003854bb96433e2ca2f396f35d4408eb979803b2928" name="samba-test" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="cb7b7e7861778a8942e3ff9ee700eb6866c3baf28c290f3a323fd3520b7957ed" name="samba-test" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="ec6d270743fb648f686ac0e7af3db0f7388dd3eade8de29a5c5f96277558d23c" name="samba-test" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="e747684509563ed120919e8b89a7e9d8724be84940b48b9664a98d5147594a48" name="samba-test" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="818330195f3772b1f54ab1dd77291b52a22f9c614947b52f904c661ee0198b57" name="samba-test-libs" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="9ef782d0233fd0bd031a8b9f11191d8f49eba17d587551de6385d89db02e42bd" name="samba-test-libs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="b861210fc1b4515be49f53a4756a58f1531b91c589076c015700771ccd02ea60" name="samba-test-libs" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="99c554ae968e6f74a82618eea3fb228943a174d6f1ddcfa2ec7d8870cf9cfdb2" name="samba-test-libs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="757553e4f38092e7bbd2928dd4af7efcfb06913f7af8c4c8d3b2c113d69f1afb" name="samba-test-libs" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="add39c75d937c7af63adaa95defaaa5a5212e3e0b22b1d071515a66997304288" name="samba-test-libs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="3d6d103d818718ad5d201882ec1635c9676b61edecf5e2ba2e2eb55ca3710f28" name="samba-vfs-glusterfs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="1cf5aa636dca94bdce454624065b37091cb20d3dd35f45bb8e2177bcda24c27a" name="samba-vfs-glusterfs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="d2ac1564956d51c5f9c628b324ab2fda86fcd707f7d2fa6af9249acfa9ade1a6" name="samba-vfs-glusterfs" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="68cd3a96f8606c032cef0ae55e42d84902246c4ae9a7c318b9167ab3c9334a06" name="samba-winbind" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="682d7454a8a698351ea49b6ceb21f56689e94beba1182959dc4c4a094a2859fd" name="samba-winbind" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="ae5c757a014841bef854224949255a87c37330879d4444309ca83ce7fc8eec60" name="samba-winbind" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="e66bbe7a63361381e89bdfe51d9772f2674660d5462f10540a530a795886e6e8" name="samba-winbind" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="6ef5996ac92123ed94ebe512a8c9c4fef398c567ccd8a77f0a2d471b6765d328" name="samba-winbind" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="072a28d6a5e4891c26f08dd3a582e08375c2987e226fb175dd5fd3d047ce7ca6" name="samba-winbind" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="e97f1e29fb3bf7bf61abc42f61ddf8e99074a620f0c4ede933cbe316ce751f26" name="samba-winbind-clients" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="b613b810bc5b9d5b8a22304e99db1574b3cbdecac18236ac1cfadba76ad6bc1f" name="samba-winbind-clients" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="2a7d9aee3e6faacd980a550b18a709e0e65924333368c4d4963ca40e80ea0ed7" name="samba-winbind-clients" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="032caead438836180b7019f889f19efb170708f70051cf0c07064165c01047d2" name="samba-winbind-clients" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="c0ca02088aa9a8f4b513d986cfac8b39d0e6d70f92693615a82a81b4536ebc6e" name="samba-winbind-clients" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="4a188a112a202b5a5dd3c7fec6ac488917b9fa9bda2cf1a0dd2d8b5e5e25edec" name="samba-winbind-clients" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="f9fc26c2777d9d0de1e194b800a9188b3a35a34f51c51e7738ece96fa2065e8c" name="samba-winbind-krb5-locator" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="9e21cc812df42773f2617362eb32c0f98090a702af959e1032d380db345624b7" name="samba-winbind-krb5-locator" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="b1919f1f7a6b09165f06e4745e6088461767208592ba1f33979fabceec1ebe9a" name="samba-winbind-krb5-locator" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="9f85017cf693d57bc2f2159a9100b18d5dcf915ccb0a8fb0ab532fb1d5775ad5" name="samba-winbind-krb5-locator" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="a35f1de79f5cab7310d25a025de71daf4b5d3478984ebd99dd9063f24873d20c" name="samba-winbind-krb5-locator" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="8bc19feb4cf907a7cbf725c25e32c707c4820d3b762068d68d421489634e2c02" name="samba-winbind-krb5-locator" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="4bdc357550c865ee023fd9495fcdb01127efb8d4073c2aa7eef95e314c02068d" name="samba-winbind-modules" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="02d455202ec7ae17750881987dc2cab5f20d846fa80b1ff95bcbefc4d3516b6c" name="samba-winbind-modules" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="4341d4930c25e41cabdab645051ae84dbc4a8fe9d3a2d4f0fb18f426e19fa4f0" name="samba-winbind-modules" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="be4b345ea9ff8de59eeafc02058c157d4fb2ae86d1ce61b8ee405d40e03488f0" name="samba-winbind-modules" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="61462fab56b79ebd9fccdce1b9766adc26dec5d14faa777e957fac235100e1e6" name="samba-winbind-modules" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="3a233ef41298161cb4496c1daffd65def184e898615c447eef665a2ebae5b982" name="samba-winbind-modules" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="8fe2a1f0f7bf79d8f01da2841ee9e9e854db750c07778fbfb354d727a09de52a" name="sblim-gather" arch="i686">
  <version epoch="0" ver="2.2.8" rel="8.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.2.7-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 2.2.7-3" date="1361966400">- Fixed a typo
- Added missing providers
- improved providers registration
- Fixed owning of filesystem's directories (man)</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-1" date="1363608000">- Update to sblim-gather-2.2.8</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-2" date="1367841600">- Add -fno-strict-aliasing
- Do not ship old init script, add systemd support</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-5" date="1395057600">- Fix multilib conflicts
  Resolves: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-6" date="1395662400">- Fix failing scriptlets when CIMOM is not running
  Related: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-7" date="1456142400">- Fix sblim-gather is installing files under /etc/tmpfiles.d/
  Resolves: #1180992
- Build with PIE and full RELRO
  Resolves: #1092566</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-8" date="1499774400">- Fix reposd crashes with SIGFPE during calcluation of interval metric when there
  are duplicate data values in the repository
  Resolves: #1467038</changelog>
</package>
<package pkgid="30400decb021be68703907dcd821f11790c3867259939d5e2942368830108877" name="sblim-gather" arch="src">
  <version epoch="0" ver="2.2.8" rel="8.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.2.7-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 2.2.7-3" date="1361966400">- Fixed a typo
- Added missing providers
- improved providers registration
- Fixed owning of filesystem's directories (man)</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-1" date="1363608000">- Update to sblim-gather-2.2.8</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-2" date="1367841600">- Add -fno-strict-aliasing
- Do not ship old init script, add systemd support</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-5" date="1395057600">- Fix multilib conflicts
  Resolves: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-6" date="1395662400">- Fix failing scriptlets when CIMOM is not running
  Related: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-7" date="1456142400">- Fix sblim-gather is installing files under /etc/tmpfiles.d/
  Resolves: #1180992
- Build with PIE and full RELRO
  Resolves: #1092566</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-8" date="1499774400">- Fix reposd crashes with SIGFPE during calcluation of interval metric when there
  are duplicate data values in the repository
  Resolves: #1467038</changelog>
</package>
<package pkgid="4857cc54d326c5bf3348f371366144add61d036f88a55f00ac8410e61b613e0a" name="sblim-gather" arch="src">
  <version epoch="0" ver="2.2.8" rel="8.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.2.7-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 2.2.7-3" date="1361966400">- Fixed a typo
- Added missing providers
- improved providers registration
- Fixed owning of filesystem's directories (man)</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-1" date="1363608000">- Update to sblim-gather-2.2.8</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-2" date="1367841600">- Add -fno-strict-aliasing
- Do not ship old init script, add systemd support</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-5" date="1395057600">- Fix multilib conflicts
  Resolves: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-6" date="1395662400">- Fix failing scriptlets when CIMOM is not running
  Related: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-7" date="1456142400">- Fix sblim-gather is installing files under /etc/tmpfiles.d/
  Resolves: #1180992
- Build with PIE and full RELRO
  Resolves: #1092566</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-8" date="1499774400">- Fix reposd crashes with SIGFPE during calcluation of interval metric when there
  are duplicate data values in the repository
  Resolves: #1467038</changelog>
</package>
<package pkgid="f71e55b829097f7e32f74915039d8312b6214d2a6fe4ae4c2cfa3e88bf6bb254" name="sblim-gather" arch="x86_64">
  <version epoch="0" ver="2.2.8" rel="8.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.2.7-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 2.2.7-3" date="1361966400">- Fixed a typo
- Added missing providers
- improved providers registration
- Fixed owning of filesystem's directories (man)</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-1" date="1363608000">- Update to sblim-gather-2.2.8</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-2" date="1367841600">- Add -fno-strict-aliasing
- Do not ship old init script, add systemd support</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-5" date="1395057600">- Fix multilib conflicts
  Resolves: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-6" date="1395662400">- Fix failing scriptlets when CIMOM is not running
  Related: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-7" date="1456142400">- Fix sblim-gather is installing files under /etc/tmpfiles.d/
  Resolves: #1180992
- Build with PIE and full RELRO
  Resolves: #1092566</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-8" date="1499774400">- Fix reposd crashes with SIGFPE during calcluation of interval metric when there
  are duplicate data values in the repository
  Resolves: #1467038</changelog>
</package>
<package pkgid="50587450855e2e688b44f0c219829f2bce7f8fcca00e9a29894e5b7dc9b47ab4" name="sblim-gather-debuginfo" arch="i686">
  <version epoch="0" ver="2.2.8" rel="8.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.2.7-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 2.2.7-3" date="1361966400">- Fixed a typo
- Added missing providers
- improved providers registration
- Fixed owning of filesystem's directories (man)</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-1" date="1363608000">- Update to sblim-gather-2.2.8</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-2" date="1367841600">- Add -fno-strict-aliasing
- Do not ship old init script, add systemd support</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-5" date="1395057600">- Fix multilib conflicts
  Resolves: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-6" date="1395662400">- Fix failing scriptlets when CIMOM is not running
  Related: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-7" date="1456142400">- Fix sblim-gather is installing files under /etc/tmpfiles.d/
  Resolves: #1180992
- Build with PIE and full RELRO
  Resolves: #1092566</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-8" date="1499774400">- Fix reposd crashes with SIGFPE during calcluation of interval metric when there
  are duplicate data values in the repository
  Resolves: #1467038</changelog>
</package>
<package pkgid="de38b6f77eaae28f644d6b51d590b2c3e754e670ea12be676b924b72488a74af" name="sblim-gather-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.8" rel="8.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.2.7-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 2.2.7-3" date="1361966400">- Fixed a typo
- Added missing providers
- improved providers registration
- Fixed owning of filesystem's directories (man)</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-1" date="1363608000">- Update to sblim-gather-2.2.8</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-2" date="1367841600">- Add -fno-strict-aliasing
- Do not ship old init script, add systemd support</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-5" date="1395057600">- Fix multilib conflicts
  Resolves: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-6" date="1395662400">- Fix failing scriptlets when CIMOM is not running
  Related: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-7" date="1456142400">- Fix sblim-gather is installing files under /etc/tmpfiles.d/
  Resolves: #1180992
- Build with PIE and full RELRO
  Resolves: #1092566</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-8" date="1499774400">- Fix reposd crashes with SIGFPE during calcluation of interval metric when there
  are duplicate data values in the repository
  Resolves: #1467038</changelog>
</package>
<package pkgid="4490cf797e43c48aa2b4e13a53c6309f6c23a92d6c4bcbd9bdbce48c17af0d30" name="sblim-gather-devel" arch="i686">
  <version epoch="0" ver="2.2.8" rel="8.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.2.7-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 2.2.7-3" date="1361966400">- Fixed a typo
- Added missing providers
- improved providers registration
- Fixed owning of filesystem's directories (man)</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-1" date="1363608000">- Update to sblim-gather-2.2.8</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-2" date="1367841600">- Add -fno-strict-aliasing
- Do not ship old init script, add systemd support</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-5" date="1395057600">- Fix multilib conflicts
  Resolves: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-6" date="1395662400">- Fix failing scriptlets when CIMOM is not running
  Related: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-7" date="1456142400">- Fix sblim-gather is installing files under /etc/tmpfiles.d/
  Resolves: #1180992
- Build with PIE and full RELRO
  Resolves: #1092566</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-8" date="1499774400">- Fix reposd crashes with SIGFPE during calcluation of interval metric when there
  are duplicate data values in the repository
  Resolves: #1467038</changelog>
</package>
<package pkgid="4f32058449d4666b377e84d6aa9b2e53fc125c89a15e8ee93ba4c666883a9748" name="sblim-gather-devel" arch="x86_64">
  <version epoch="0" ver="2.2.8" rel="8.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.2.7-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 2.2.7-3" date="1361966400">- Fixed a typo
- Added missing providers
- improved providers registration
- Fixed owning of filesystem's directories (man)</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-1" date="1363608000">- Update to sblim-gather-2.2.8</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-2" date="1367841600">- Add -fno-strict-aliasing
- Do not ship old init script, add systemd support</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-5" date="1395057600">- Fix multilib conflicts
  Resolves: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-6" date="1395662400">- Fix failing scriptlets when CIMOM is not running
  Related: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-7" date="1456142400">- Fix sblim-gather is installing files under /etc/tmpfiles.d/
  Resolves: #1180992
- Build with PIE and full RELRO
  Resolves: #1092566</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-8" date="1499774400">- Fix reposd crashes with SIGFPE during calcluation of interval metric when there
  are duplicate data values in the repository
  Resolves: #1467038</changelog>
</package>
<package pkgid="2fc8a5183f276fec398c4e3d2cb7253c0f31476d04f3b914228ce5a72525ad51" name="sblim-gather-provider" arch="i686">
  <version epoch="0" ver="2.2.8" rel="8.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.2.7-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 2.2.7-3" date="1361966400">- Fixed a typo
- Added missing providers
- improved providers registration
- Fixed owning of filesystem's directories (man)</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-1" date="1363608000">- Update to sblim-gather-2.2.8</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-2" date="1367841600">- Add -fno-strict-aliasing
- Do not ship old init script, add systemd support</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-5" date="1395057600">- Fix multilib conflicts
  Resolves: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-6" date="1395662400">- Fix failing scriptlets when CIMOM is not running
  Related: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-7" date="1456142400">- Fix sblim-gather is installing files under /etc/tmpfiles.d/
  Resolves: #1180992
- Build with PIE and full RELRO
  Resolves: #1092566</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-8" date="1499774400">- Fix reposd crashes with SIGFPE during calcluation of interval metric when there
  are duplicate data values in the repository
  Resolves: #1467038</changelog>
</package>
<package pkgid="8194ca0df61ee1252b19b1309f7f3097e56298eaf93e1e6b80c4c0b61cb50683" name="sblim-gather-provider" arch="x86_64">
  <version epoch="0" ver="2.2.8" rel="8.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.2.7-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 2.2.7-3" date="1361966400">- Fixed a typo
- Added missing providers
- improved providers registration
- Fixed owning of filesystem's directories (man)</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-1" date="1363608000">- Update to sblim-gather-2.2.8</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-2" date="1367841600">- Add -fno-strict-aliasing
- Do not ship old init script, add systemd support</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-5" date="1395057600">- Fix multilib conflicts
  Resolves: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-6" date="1395662400">- Fix failing scriptlets when CIMOM is not running
  Related: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-7" date="1456142400">- Fix sblim-gather is installing files under /etc/tmpfiles.d/
  Resolves: #1180992
- Build with PIE and full RELRO
  Resolves: #1092566</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-8" date="1499774400">- Fix reposd crashes with SIGFPE during calcluation of interval metric when there
  are duplicate data values in the repository
  Resolves: #1467038</changelog>
</package>
<package pkgid="29776513d3f07018f7e8d11be5b02ec8828410bc5cc7c6485f1cfc12eb654e0e" name="sblim-gather-test" arch="i686">
  <version epoch="0" ver="2.2.8" rel="8.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.2.7-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 2.2.7-3" date="1361966400">- Fixed a typo
- Added missing providers
- improved providers registration
- Fixed owning of filesystem's directories (man)</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-1" date="1363608000">- Update to sblim-gather-2.2.8</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-2" date="1367841600">- Add -fno-strict-aliasing
- Do not ship old init script, add systemd support</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-5" date="1395057600">- Fix multilib conflicts
  Resolves: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-6" date="1395662400">- Fix failing scriptlets when CIMOM is not running
  Related: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-7" date="1456142400">- Fix sblim-gather is installing files under /etc/tmpfiles.d/
  Resolves: #1180992
- Build with PIE and full RELRO
  Resolves: #1092566</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-8" date="1499774400">- Fix reposd crashes with SIGFPE during calcluation of interval metric when there
  are duplicate data values in the repository
  Resolves: #1467038</changelog>
</package>
<package pkgid="bf2b647d5b29c2b433db9ca9397b51b5c5b5eacdfc4a72efd2b13cfcc9a5f87d" name="sblim-gather-test" arch="x86_64">
  <version epoch="0" ver="2.2.8" rel="8.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.2.7-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 2.2.7-3" date="1361966400">- Fixed a typo
- Added missing providers
- improved providers registration
- Fixed owning of filesystem's directories (man)</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-1" date="1363608000">- Update to sblim-gather-2.2.8</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-2" date="1367841600">- Add -fno-strict-aliasing
- Do not ship old init script, add systemd support</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-5" date="1395057600">- Fix multilib conflicts
  Resolves: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-6" date="1395662400">- Fix failing scriptlets when CIMOM is not running
  Related: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-7" date="1456142400">- Fix sblim-gather is installing files under /etc/tmpfiles.d/
  Resolves: #1180992
- Build with PIE and full RELRO
  Resolves: #1092566</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-8" date="1499774400">- Fix reposd crashes with SIGFPE during calcluation of interval metric when there
  are duplicate data values in the repository
  Resolves: #1467038</changelog>
</package>
<package pkgid="2e7f520f327ec46ffce1535855d3b88d9f3fc38f4343657f777ed505de085209" name="scap-security-guide" arch="noarch">
  <version epoch="0" ver="0.1.33" rel="6.el7.centos"/>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.30-5" date="1487073600">- Fix template remediation function used by SSHD remediation
- Reduce scope of patch that fixes SSHD remediation (RH BZ#1415152)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.30-6" date="1489147200">- Ship separate OCIL definitions for Red Hat Enterprise Linux 7 (RHBZ#1428144)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.32-1" date="1490702400">- Update to upstream version 0.1.32
- New CMake build system
- Improved NIST 800-171 profile
- Initial RHVH profile
- New CPE to identify systems like machines (bare-metal and VM) and containers (image and container)
- Template clean up in lots of remediations</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-1" date="1493640000">- Update to upstream version 0.1.33
- DISA RHEL7 STIG profile alignment improved
- Introduction of remediation roles
- RPM and DEB test packages are built by CMake with CPack
- Lots of remediation fixes</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-2" date="1495195200">- Fix emtpy ospp-rhel7 table
- Fix Anaconda remediation templates (RHBZ#1450731)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-3" date="1495195201">- Fix malformed title of profile nist-800-171-cui</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-4" date="1495195202">- Fix specfile to not include tables twice</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-5" date="1497441600">- Fix Anaconda Smartcard auth remediation (RHBZ#1461330)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-6" date="1505822400">- Dropped remediation that makes system not accessible by SSH (RHBZ#1478414)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 0.1.33-6" date="1508414400">- Manual CentOS debranding</changelog>
</package>
<package pkgid="e249fee39f08715d37cdd41d09d25dcdef9a9e5fc84161f36543063a0d126688" name="scap-security-guide" arch="src">
  <version epoch="0" ver="0.1.33" rel="6.el7.centos"/>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.30-5" date="1487073600">- Fix template remediation function used by SSHD remediation
- Reduce scope of patch that fixes SSHD remediation (RH BZ#1415152)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.30-6" date="1489147200">- Ship separate OCIL definitions for Red Hat Enterprise Linux 7 (RHBZ#1428144)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.32-1" date="1490702400">- Update to upstream version 0.1.32
- New CMake build system
- Improved NIST 800-171 profile
- Initial RHVH profile
- New CPE to identify systems like machines (bare-metal and VM) and containers (image and container)
- Template clean up in lots of remediations</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-1" date="1493640000">- Update to upstream version 0.1.33
- DISA RHEL7 STIG profile alignment improved
- Introduction of remediation roles
- RPM and DEB test packages are built by CMake with CPack
- Lots of remediation fixes</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-2" date="1495195200">- Fix emtpy ospp-rhel7 table
- Fix Anaconda remediation templates (RHBZ#1450731)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-3" date="1495195201">- Fix malformed title of profile nist-800-171-cui</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-4" date="1495195202">- Fix specfile to not include tables twice</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-5" date="1497441600">- Fix Anaconda Smartcard auth remediation (RHBZ#1461330)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-6" date="1505822400">- Dropped remediation that makes system not accessible by SSH (RHBZ#1478414)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 0.1.33-6" date="1508414400">- Manual CentOS debranding</changelog>
</package>
<package pkgid="0184f530cac08a86488990fc94f08be3d43e5c3770a990699cd697d01dc74bea" name="scap-security-guide-doc" arch="noarch">
  <version epoch="0" ver="0.1.33" rel="6.el7.centos"/>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.30-5" date="1487073600">- Fix template remediation function used by SSHD remediation
- Reduce scope of patch that fixes SSHD remediation (RH BZ#1415152)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.30-6" date="1489147200">- Ship separate OCIL definitions for Red Hat Enterprise Linux 7 (RHBZ#1428144)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.32-1" date="1490702400">- Update to upstream version 0.1.32
- New CMake build system
- Improved NIST 800-171 profile
- Initial RHVH profile
- New CPE to identify systems like machines (bare-metal and VM) and containers (image and container)
- Template clean up in lots of remediations</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-1" date="1493640000">- Update to upstream version 0.1.33
- DISA RHEL7 STIG profile alignment improved
- Introduction of remediation roles
- RPM and DEB test packages are built by CMake with CPack
- Lots of remediation fixes</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-2" date="1495195200">- Fix emtpy ospp-rhel7 table
- Fix Anaconda remediation templates (RHBZ#1450731)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-3" date="1495195201">- Fix malformed title of profile nist-800-171-cui</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-4" date="1495195202">- Fix specfile to not include tables twice</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-5" date="1497441600">- Fix Anaconda Smartcard auth remediation (RHBZ#1461330)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; 0.1.33-6" date="1505822400">- Dropped remediation that makes system not accessible by SSH (RHBZ#1478414)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; 0.1.33-6" date="1508414400">- Manual CentOS debranding</changelog>
</package>
<package pkgid="7b43cfc431ad2119f64a48c3d26c2882e1738496f90e231c907ab8c630ff6c01" name="scl-utils" arch="i686">
  <version epoch="0" ver="20130529" rel="18.el7_4"/>
  <changelog author="Lubos Kardos &lt;lkardos@redhat.com&gt; - 20130529-10" date="1417780800">- Allow to use vendor prefix in packages names
- Include %nfsmountable macro into scl's rpm macros file</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20130529-11" date="1418385600">- renamed %scl_pkg_prefix to %scl_full_prefix (#1167042)</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20132529-12" date="1418385601">- the second half of the macro rename</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20132529-13" date="1420459200">- after a thorough discussion with scl maintainers, revert the vendor prefix
  in package names</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20130529-13" date="1420545600">- bump the version to get in sync with 7.1 branch
- Reflect the state of %nfsmountable macro in collections' rpm macro files
- escape all the % chars in changelog</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20142529-14" date="1420545601">- remove the vendor prefix from %scl_install</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-15" date="1422360000">- fixed wrong syntax of or-operator in scl.attr</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-16" date="1425556800">- Remove /scls/ from macros  _sysconfdir, _sharedstatedir and _localstatedir</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-17" date="1425556801">- Remove /uucp/ from directory structure.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 20130529-18" date="1484308800">- fix "scl enable" usage in shebang lines (#1372700)</changelog>
</package>
<package pkgid="46eb1f8f7eaaa5ac215c61a58d2bbe2a4ed56d58cb157f44477fc4dbf7a49dda" name="scl-utils" arch="src">
  <version epoch="0" ver="20130529" rel="18.el7_4"/>
  <changelog author="Lubos Kardos &lt;lkardos@redhat.com&gt; - 20130529-10" date="1417780800">- Allow to use vendor prefix in packages names
- Include %nfsmountable macro into scl's rpm macros file</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20130529-11" date="1418385600">- renamed %scl_pkg_prefix to %scl_full_prefix (#1167042)</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20132529-12" date="1418385601">- the second half of the macro rename</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20132529-13" date="1420459200">- after a thorough discussion with scl maintainers, revert the vendor prefix
  in package names</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20130529-13" date="1420545600">- bump the version to get in sync with 7.1 branch
- Reflect the state of %nfsmountable macro in collections' rpm macro files
- escape all the % chars in changelog</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20142529-14" date="1420545601">- remove the vendor prefix from %scl_install</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-15" date="1422360000">- fixed wrong syntax of or-operator in scl.attr</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-16" date="1425556800">- Remove /scls/ from macros  _sysconfdir, _sharedstatedir and _localstatedir</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-17" date="1425556801">- Remove /uucp/ from directory structure.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 20130529-18" date="1484308800">- fix "scl enable" usage in shebang lines (#1372700)</changelog>
</package>
<package pkgid="7adb8a7255a792357db77d5842b1544269e73faca21eebe1be9000407398c844" name="scl-utils" arch="src">
  <version epoch="0" ver="20130529" rel="18.el7_4"/>
  <changelog author="Lubos Kardos &lt;lkardos@redhat.com&gt; - 20130529-10" date="1417780800">- Allow to use vendor prefix in packages names
- Include %nfsmountable macro into scl's rpm macros file</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20130529-11" date="1418385600">- renamed %scl_pkg_prefix to %scl_full_prefix (#1167042)</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20132529-12" date="1418385601">- the second half of the macro rename</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20132529-13" date="1420459200">- after a thorough discussion with scl maintainers, revert the vendor prefix
  in package names</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20130529-13" date="1420545600">- bump the version to get in sync with 7.1 branch
- Reflect the state of %nfsmountable macro in collections' rpm macro files
- escape all the % chars in changelog</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20142529-14" date="1420545601">- remove the vendor prefix from %scl_install</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-15" date="1422360000">- fixed wrong syntax of or-operator in scl.attr</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-16" date="1425556800">- Remove /scls/ from macros  _sysconfdir, _sharedstatedir and _localstatedir</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-17" date="1425556801">- Remove /uucp/ from directory structure.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 20130529-18" date="1484308800">- fix "scl enable" usage in shebang lines (#1372700)</changelog>
</package>
<package pkgid="7ee8384a1cf91171041d81960bb40aa47916c57878cf661bb1a7a5180a6e72c0" name="scl-utils" arch="x86_64">
  <version epoch="0" ver="20130529" rel="18.el7_4"/>
  <changelog author="Lubos Kardos &lt;lkardos@redhat.com&gt; - 20130529-10" date="1417780800">- Allow to use vendor prefix in packages names
- Include %nfsmountable macro into scl's rpm macros file</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20130529-11" date="1418385600">- renamed %scl_pkg_prefix to %scl_full_prefix (#1167042)</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20132529-12" date="1418385601">- the second half of the macro rename</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20132529-13" date="1420459200">- after a thorough discussion with scl maintainers, revert the vendor prefix
  in package names</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20130529-13" date="1420545600">- bump the version to get in sync with 7.1 branch
- Reflect the state of %nfsmountable macro in collections' rpm macro files
- escape all the % chars in changelog</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20142529-14" date="1420545601">- remove the vendor prefix from %scl_install</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-15" date="1422360000">- fixed wrong syntax of or-operator in scl.attr</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-16" date="1425556800">- Remove /scls/ from macros  _sysconfdir, _sharedstatedir and _localstatedir</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-17" date="1425556801">- Remove /uucp/ from directory structure.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 20130529-18" date="1484308800">- fix "scl enable" usage in shebang lines (#1372700)</changelog>
</package>
<package pkgid="284da8cbeecf9bbaf0543495f6dfc4ab5eb25d9631befd136d1f875e9abd619b" name="scl-utils-build" arch="i686">
  <version epoch="0" ver="20130529" rel="18.el7_4"/>
  <changelog author="Lubos Kardos &lt;lkardos@redhat.com&gt; - 20130529-10" date="1417780800">- Allow to use vendor prefix in packages names
- Include %nfsmountable macro into scl's rpm macros file</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20130529-11" date="1418385600">- renamed %scl_pkg_prefix to %scl_full_prefix (#1167042)</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20132529-12" date="1418385601">- the second half of the macro rename</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20132529-13" date="1420459200">- after a thorough discussion with scl maintainers, revert the vendor prefix
  in package names</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20130529-13" date="1420545600">- bump the version to get in sync with 7.1 branch
- Reflect the state of %nfsmountable macro in collections' rpm macro files
- escape all the % chars in changelog</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20142529-14" date="1420545601">- remove the vendor prefix from %scl_install</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-15" date="1422360000">- fixed wrong syntax of or-operator in scl.attr</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-16" date="1425556800">- Remove /scls/ from macros  _sysconfdir, _sharedstatedir and _localstatedir</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-17" date="1425556801">- Remove /uucp/ from directory structure.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 20130529-18" date="1484308800">- fix "scl enable" usage in shebang lines (#1372700)</changelog>
</package>
<package pkgid="b377c3a908fc490d75345645e78444c7337e06a2f47e4be8aa20780fd797cdb5" name="scl-utils-build" arch="x86_64">
  <version epoch="0" ver="20130529" rel="18.el7_4"/>
  <changelog author="Lubos Kardos &lt;lkardos@redhat.com&gt; - 20130529-10" date="1417780800">- Allow to use vendor prefix in packages names
- Include %nfsmountable macro into scl's rpm macros file</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20130529-11" date="1418385600">- renamed %scl_pkg_prefix to %scl_full_prefix (#1167042)</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20132529-12" date="1418385601">- the second half of the macro rename</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20132529-13" date="1420459200">- after a thorough discussion with scl maintainers, revert the vendor prefix
  in package names</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20130529-13" date="1420545600">- bump the version to get in sync with 7.1 branch
- Reflect the state of %nfsmountable macro in collections' rpm macro files
- escape all the % chars in changelog</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20142529-14" date="1420545601">- remove the vendor prefix from %scl_install</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-15" date="1422360000">- fixed wrong syntax of or-operator in scl.attr</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-16" date="1425556800">- Remove /scls/ from macros  _sysconfdir, _sharedstatedir and _localstatedir</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-17" date="1425556801">- Remove /uucp/ from directory structure.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 20130529-18" date="1484308800">- fix "scl enable" usage in shebang lines (#1372700)</changelog>
</package>
<package pkgid="04b30001166a7bbfcbeb5a0ee72a26d78777fc1e556e1dcedf37671303317550" name="scl-utils-debuginfo" arch="i686">
  <version epoch="0" ver="20130529" rel="18.el7_4"/>
  <changelog author="Lubos Kardos &lt;lkardos@redhat.com&gt; - 20130529-10" date="1417780800">- Allow to use vendor prefix in packages names
- Include %nfsmountable macro into scl's rpm macros file</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20130529-11" date="1418385600">- renamed %scl_pkg_prefix to %scl_full_prefix (#1167042)</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20132529-12" date="1418385601">- the second half of the macro rename</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20132529-13" date="1420459200">- after a thorough discussion with scl maintainers, revert the vendor prefix
  in package names</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20130529-13" date="1420545600">- bump the version to get in sync with 7.1 branch
- Reflect the state of %nfsmountable macro in collections' rpm macro files
- escape all the % chars in changelog</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20142529-14" date="1420545601">- remove the vendor prefix from %scl_install</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-15" date="1422360000">- fixed wrong syntax of or-operator in scl.attr</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-16" date="1425556800">- Remove /scls/ from macros  _sysconfdir, _sharedstatedir and _localstatedir</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-17" date="1425556801">- Remove /uucp/ from directory structure.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 20130529-18" date="1484308800">- fix "scl enable" usage in shebang lines (#1372700)</changelog>
</package>
<package pkgid="69b86adcd15d477f03b46250c498cf3171558f5eb9ff4c82d0ef9140c2902b7e" name="scl-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="20130529" rel="18.el7_4"/>
  <changelog author="Lubos Kardos &lt;lkardos@redhat.com&gt; - 20130529-10" date="1417780800">- Allow to use vendor prefix in packages names
- Include %nfsmountable macro into scl's rpm macros file</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20130529-11" date="1418385600">- renamed %scl_pkg_prefix to %scl_full_prefix (#1167042)</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20132529-12" date="1418385601">- the second half of the macro rename</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20132529-13" date="1420459200">- after a thorough discussion with scl maintainers, revert the vendor prefix
  in package names</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20130529-13" date="1420545600">- bump the version to get in sync with 7.1 branch
- Reflect the state of %nfsmountable macro in collections' rpm macro files
- escape all the % chars in changelog</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20142529-14" date="1420545601">- remove the vendor prefix from %scl_install</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-15" date="1422360000">- fixed wrong syntax of or-operator in scl.attr</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-16" date="1425556800">- Remove /scls/ from macros  _sysconfdir, _sharedstatedir and _localstatedir</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-17" date="1425556801">- Remove /uucp/ from directory structure.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 20130529-18" date="1484308800">- fix "scl enable" usage in shebang lines (#1372700)</changelog>
</package>
<package pkgid="a4095f9f4fa5e96bdaaf0e7e9506106c7309cfbd021c4c84fd88bcf420052864" name="seabios" arch="src">
  <version epoch="0" ver="1.10.2" rel="3.el7_4.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-3.el7" date="1461672000">- seabios-redhat-reserve-more-memory-on-fseg.patch [bz#1327060]
- seabios-redhat-turn-off-some-config-options.patch [bz#1327060]
- Resolves: bz#1327060
  ([Seabios]Limited boot number supported for SCSI/SATA)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-4.el7" date="1462968000">- seabios-Build-vgabios-virtio.bin.patch [bz#1327001]
- Resolves: bz#1327001
  (vgabios-virtio.bin should be included  in seavgabios-bin package)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-5.el7" date="1473940800">- seabios-pci-don-t-map-virtio-1.0-storage-devices-above-4G.patch [bz#1373154]
- Resolves: bz#1373154
  (Guest fails boot up with ivshmem-plain and virtio-pci device)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-5.el7_3.1" date="1480420800">- seabios-vgabios-Reorder-video-modes-to-work-around-a-Windows.patch [bz#1392028]
- Resolves: bz#1392028
  ([virtio-win][svvp][ws2016] cannot generate dump file when using nmi on ws2016 and win10-32/64)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.1-1.el7" date="1484049600">- Rebase to seabios 1.10.1 [bz#1392821]
- Resolves: bz#1392821
  (Rebase seabios to 1.10.1)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.1-2.el7" date="1486123200">- seabios-smm-disable-by-default.patch [bz#1378006]
- seabios-ahci-Set-upper-32-bit-registers-to-zero.patch [bz#1418320]
- Resolves: bz#1378006
  (guest paused on target host sometimes when do migration during guest boot)
- Resolves: bz#1418320
  (Seabios does not fully reset AHCI adapters)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhta.com&gt; - 1.10.2-1.el7" date="1489147200">- Rebase to 1.10.2 [bz#1392821]
- Resolves:  bz#1392821
 (Rebase seabios to 1.10.1)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.2-2.el7" date="1490875200">- seabios-resume-Don-t-attempt-to-use-generic-reboot-mechanism.patch [bz#1428347]
- Resolves: bz#1428347
  (reboot hangs on rhel6 machine types (~1/20 times))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.2-3.el7" date="1494590400">- seabios-blockcmd-accept-only-disks-and-CD-ROMs.patch [bz#1020622]
- seabios-blockcmd-generic-SCSI-luns-enumeration.patch [bz#1020622]
- seabios-virtio-scsi-enumerate-luns-with-REPORT-LUNS.patch [bz#1020622]
- seabios-usb-uas-enumerate-luns-with-REPORT-LUNS.patch [bz#1020622]
- Resolves: bz#1020622
  (seabios fail to recognize virtio-scsi device if specify LUN not 0)</changelog>
  <changelog author="Danilo Cesar Lemes de Paula &lt;ddepaula@redhat.com&gt; - 1.10.2-3.el7_4.1" date="1501070400">- seabios-virtio-IOMMU-support.patch [bz#1472131]
- Resolves: bz#1472131
  (Guest OS will down when disk enable the IOMMU for Virtio)</changelog>
</package>
<package pkgid="d55e3e1a02efd188e82d36a4d7cb5cab5221b9f77ddcb95c27572851843535c9" name="seabios" arch="x86_64">
  <version epoch="0" ver="1.10.2" rel="3.el7_4.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-3.el7" date="1461672000">- seabios-redhat-reserve-more-memory-on-fseg.patch [bz#1327060]
- seabios-redhat-turn-off-some-config-options.patch [bz#1327060]
- Resolves: bz#1327060
  ([Seabios]Limited boot number supported for SCSI/SATA)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-4.el7" date="1462968000">- seabios-Build-vgabios-virtio.bin.patch [bz#1327001]
- Resolves: bz#1327001
  (vgabios-virtio.bin should be included  in seavgabios-bin package)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-5.el7" date="1473940800">- seabios-pci-don-t-map-virtio-1.0-storage-devices-above-4G.patch [bz#1373154]
- Resolves: bz#1373154
  (Guest fails boot up with ivshmem-plain and virtio-pci device)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-5.el7_3.1" date="1480420800">- seabios-vgabios-Reorder-video-modes-to-work-around-a-Windows.patch [bz#1392028]
- Resolves: bz#1392028
  ([virtio-win][svvp][ws2016] cannot generate dump file when using nmi on ws2016 and win10-32/64)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.1-1.el7" date="1484049600">- Rebase to seabios 1.10.1 [bz#1392821]
- Resolves: bz#1392821
  (Rebase seabios to 1.10.1)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.1-2.el7" date="1486123200">- seabios-smm-disable-by-default.patch [bz#1378006]
- seabios-ahci-Set-upper-32-bit-registers-to-zero.patch [bz#1418320]
- Resolves: bz#1378006
  (guest paused on target host sometimes when do migration during guest boot)
- Resolves: bz#1418320
  (Seabios does not fully reset AHCI adapters)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhta.com&gt; - 1.10.2-1.el7" date="1489147200">- Rebase to 1.10.2 [bz#1392821]
- Resolves:  bz#1392821
 (Rebase seabios to 1.10.1)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.2-2.el7" date="1490875200">- seabios-resume-Don-t-attempt-to-use-generic-reboot-mechanism.patch [bz#1428347]
- Resolves: bz#1428347
  (reboot hangs on rhel6 machine types (~1/20 times))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.2-3.el7" date="1494590400">- seabios-blockcmd-accept-only-disks-and-CD-ROMs.patch [bz#1020622]
- seabios-blockcmd-generic-SCSI-luns-enumeration.patch [bz#1020622]
- seabios-virtio-scsi-enumerate-luns-with-REPORT-LUNS.patch [bz#1020622]
- seabios-usb-uas-enumerate-luns-with-REPORT-LUNS.patch [bz#1020622]
- Resolves: bz#1020622
  (seabios fail to recognize virtio-scsi device if specify LUN not 0)</changelog>
  <changelog author="Danilo Cesar Lemes de Paula &lt;ddepaula@redhat.com&gt; - 1.10.2-3.el7_4.1" date="1501070400">- seabios-virtio-IOMMU-support.patch [bz#1472131]
- Resolves: bz#1472131
  (Guest OS will down when disk enable the IOMMU for Virtio)</changelog>
</package>
<package pkgid="51ab2ea53f29b61f5d746ea5fb5399888cfa3f749cacc3d292cd899982f701e9" name="seabios-bin" arch="noarch">
  <version epoch="0" ver="1.10.2" rel="3.el7_4.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-3.el7" date="1461672000">- seabios-redhat-reserve-more-memory-on-fseg.patch [bz#1327060]
- seabios-redhat-turn-off-some-config-options.patch [bz#1327060]
- Resolves: bz#1327060
  ([Seabios]Limited boot number supported for SCSI/SATA)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-4.el7" date="1462968000">- seabios-Build-vgabios-virtio.bin.patch [bz#1327001]
- Resolves: bz#1327001
  (vgabios-virtio.bin should be included  in seavgabios-bin package)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-5.el7" date="1473940800">- seabios-pci-don-t-map-virtio-1.0-storage-devices-above-4G.patch [bz#1373154]
- Resolves: bz#1373154
  (Guest fails boot up with ivshmem-plain and virtio-pci device)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-5.el7_3.1" date="1480420800">- seabios-vgabios-Reorder-video-modes-to-work-around-a-Windows.patch [bz#1392028]
- Resolves: bz#1392028
  ([virtio-win][svvp][ws2016] cannot generate dump file when using nmi on ws2016 and win10-32/64)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.1-1.el7" date="1484049600">- Rebase to seabios 1.10.1 [bz#1392821]
- Resolves: bz#1392821
  (Rebase seabios to 1.10.1)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.1-2.el7" date="1486123200">- seabios-smm-disable-by-default.patch [bz#1378006]
- seabios-ahci-Set-upper-32-bit-registers-to-zero.patch [bz#1418320]
- Resolves: bz#1378006
  (guest paused on target host sometimes when do migration during guest boot)
- Resolves: bz#1418320
  (Seabios does not fully reset AHCI adapters)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhta.com&gt; - 1.10.2-1.el7" date="1489147200">- Rebase to 1.10.2 [bz#1392821]
- Resolves:  bz#1392821
 (Rebase seabios to 1.10.1)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.2-2.el7" date="1490875200">- seabios-resume-Don-t-attempt-to-use-generic-reboot-mechanism.patch [bz#1428347]
- Resolves: bz#1428347
  (reboot hangs on rhel6 machine types (~1/20 times))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.2-3.el7" date="1494590400">- seabios-blockcmd-accept-only-disks-and-CD-ROMs.patch [bz#1020622]
- seabios-blockcmd-generic-SCSI-luns-enumeration.patch [bz#1020622]
- seabios-virtio-scsi-enumerate-luns-with-REPORT-LUNS.patch [bz#1020622]
- seabios-usb-uas-enumerate-luns-with-REPORT-LUNS.patch [bz#1020622]
- Resolves: bz#1020622
  (seabios fail to recognize virtio-scsi device if specify LUN not 0)</changelog>
  <changelog author="Danilo Cesar Lemes de Paula &lt;ddepaula@redhat.com&gt; - 1.10.2-3.el7_4.1" date="1501070400">- seabios-virtio-IOMMU-support.patch [bz#1472131]
- Resolves: bz#1472131
  (Guest OS will down when disk enable the IOMMU for Virtio)</changelog>
</package>
<package pkgid="e638e84dc6ea0bb509730f473f154fb716d0f1330ca170d781c463b2c945771a" name="seavgabios-bin" arch="noarch">
  <version epoch="0" ver="1.10.2" rel="3.el7_4.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-3.el7" date="1461672000">- seabios-redhat-reserve-more-memory-on-fseg.patch [bz#1327060]
- seabios-redhat-turn-off-some-config-options.patch [bz#1327060]
- Resolves: bz#1327060
  ([Seabios]Limited boot number supported for SCSI/SATA)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-4.el7" date="1462968000">- seabios-Build-vgabios-virtio.bin.patch [bz#1327001]
- Resolves: bz#1327001
  (vgabios-virtio.bin should be included  in seavgabios-bin package)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-5.el7" date="1473940800">- seabios-pci-don-t-map-virtio-1.0-storage-devices-above-4G.patch [bz#1373154]
- Resolves: bz#1373154
  (Guest fails boot up with ivshmem-plain and virtio-pci device)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.9.1-5.el7_3.1" date="1480420800">- seabios-vgabios-Reorder-video-modes-to-work-around-a-Windows.patch [bz#1392028]
- Resolves: bz#1392028
  ([virtio-win][svvp][ws2016] cannot generate dump file when using nmi on ws2016 and win10-32/64)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.1-1.el7" date="1484049600">- Rebase to seabios 1.10.1 [bz#1392821]
- Resolves: bz#1392821
  (Rebase seabios to 1.10.1)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.1-2.el7" date="1486123200">- seabios-smm-disable-by-default.patch [bz#1378006]
- seabios-ahci-Set-upper-32-bit-registers-to-zero.patch [bz#1418320]
- Resolves: bz#1378006
  (guest paused on target host sometimes when do migration during guest boot)
- Resolves: bz#1418320
  (Seabios does not fully reset AHCI adapters)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhta.com&gt; - 1.10.2-1.el7" date="1489147200">- Rebase to 1.10.2 [bz#1392821]
- Resolves:  bz#1392821
 (Rebase seabios to 1.10.1)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.2-2.el7" date="1490875200">- seabios-resume-Don-t-attempt-to-use-generic-reboot-mechanism.patch [bz#1428347]
- Resolves: bz#1428347
  (reboot hangs on rhel6 machine types (~1/20 times))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.10.2-3.el7" date="1494590400">- seabios-blockcmd-accept-only-disks-and-CD-ROMs.patch [bz#1020622]
- seabios-blockcmd-generic-SCSI-luns-enumeration.patch [bz#1020622]
- seabios-virtio-scsi-enumerate-luns-with-REPORT-LUNS.patch [bz#1020622]
- seabios-usb-uas-enumerate-luns-with-REPORT-LUNS.patch [bz#1020622]
- Resolves: bz#1020622
  (seabios fail to recognize virtio-scsi device if specify LUN not 0)</changelog>
  <changelog author="Danilo Cesar Lemes de Paula &lt;ddepaula@redhat.com&gt; - 1.10.2-3.el7_4.1" date="1501070400">- seabios-virtio-IOMMU-support.patch [bz#1472131]
- Resolves: bz#1472131
  (Guest OS will down when disk enable the IOMMU for Virtio)</changelog>
</package>
<package pkgid="1b1ee5085b49865a6af3a03b6aebc1c82233f2aedfa7c0ec793d47d0e57e188b" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.4"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-161" date="1496923200">- Allow httpd_t to read realmd_var_lib_t files Resolves: rhbz#1436689</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
</package>
<package pkgid="67a4766eeda5a6a6384c7a17f00fdc67694ebe563d8ea65b7f65c4be8f892821" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.4"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-161" date="1496923200">- Allow httpd_t to read realmd_var_lib_t files Resolves: rhbz#1436689</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
</package>
<package pkgid="578969afc2e1976b9c66d41aca4bdd691656b3807111975a0406f51a2496ce5b" name="selinux-policy" arch="src">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.4"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-161" date="1496923200">- Allow httpd_t to read realmd_var_lib_t files Resolves: rhbz#1436689</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
</package>
<package pkgid="ec33e0d38c25ba5923084dcd6d30551080446d812950025704ddaf8fdc06aab7" name="selinux-policy" arch="src">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.4"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-161" date="1496923200">- Allow httpd_t to read realmd_var_lib_t files Resolves: rhbz#1436689</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
</package>
<package pkgid="7843b3efd98c72e38293961ae34d3bc66433892c7d6e526ce2d800160de2bedb" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.5"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
</package>
<package pkgid="440e8482d246e5deb0783ceb08022e5e345a2c0420eeb95dbb83e4a5fb57dc44" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.5"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
</package>
<package pkgid="fc81984cb766b67b190d8f6451284403acad07a4fa97808d4f14c8380e12956d" name="selinux-policy" arch="src">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.5"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
</package>
<package pkgid="86cca043f6a21e83245c9343e868a7fa7873e3027dce96f254039e08e9a649e7" name="selinux-policy" arch="src">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.5"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
</package>
<package pkgid="10d208de667c3866e77b89e87d1dd89e3379f65fa58ab71fe75fb00c3213ac6c" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.7"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
</package>
<package pkgid="615204ee9afee26369431fbfe726aaa462827c0138277cfd738379b73e0bbbde" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.7"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
</package>
<package pkgid="35253f3e43d9028a4a987ca6b0aa4e4748860fc3645e3d146051627e7d077c41" name="selinux-policy" arch="src">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.7"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
</package>
<package pkgid="494b542116aa1d62f469425fc547b0bf33bb4d3aba75c766b599f88ba767fd94" name="selinux-policy" arch="src">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.7"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
</package>
<package pkgid="724cb37abf031d7b4eab7b9d4088129d241e1b4da7d1354540312246f9fe08f0" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.9"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.8" date="1516968000">- Update openvswitch SELinux module
Resolves: rhbz#1538936</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.9" date="1519214400">- Update openvswitch policy from Fedora
Resolves: rhbz#1538936</changelog>
</package>
<package pkgid="2cf12add641db18f4cb34855bef0b3aa3c404d7fa09f1a42018389db4d6a7c19" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.9"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.8" date="1516968000">- Update openvswitch SELinux module
Resolves: rhbz#1538936</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.9" date="1519214400">- Update openvswitch policy from Fedora
Resolves: rhbz#1538936</changelog>
</package>
<package pkgid="00d9289205467f97922c1af9c7418252b253a7d3d9b41d20d05e901dbbafa314" name="selinux-policy" arch="src">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.9"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.8" date="1516968000">- Update openvswitch SELinux module
Resolves: rhbz#1538936</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.9" date="1519214400">- Update openvswitch policy from Fedora
Resolves: rhbz#1538936</changelog>
</package>
<package pkgid="80bc181f3259cec4f9b5447df53fb1b71fa377b5210ff455420a31f9c981cbcd" name="selinux-policy" arch="src">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.9"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.8" date="1516968000">- Update openvswitch SELinux module
Resolves: rhbz#1538936</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.9" date="1519214400">- Update openvswitch policy from Fedora
Resolves: rhbz#1538936</changelog>
</package>
<package pkgid="3c582f2c57ddf37a46ce0398937b099c089a597f2e0fe2d14e6b5a94752c4ec0" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.4"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-161" date="1496923200">- Allow httpd_t to read realmd_var_lib_t files Resolves: rhbz#1436689</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
</package>
<package pkgid="9e5037ef047de3d9ee4803d3630e6b16d9fdd6a5ee56ed3e5c3e739250617a38" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.4"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-161" date="1496923200">- Allow httpd_t to read realmd_var_lib_t files Resolves: rhbz#1436689</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
</package>
<package pkgid="8aa111ea2e7bff6e553d59591907b998cefa06d4d1a67d239cc3caa2ca05ff0f" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.5"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
</package>
<package pkgid="509d697ccfa53bc0b1fbcc37f277373d2d683659f1a89d02464677307d968756" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.5"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
</package>
<package pkgid="3879f97e4f13aa0d9b2f2eb9d29ed156a2087a2f0bd4168141ea833e46658894" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.7"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
</package>
<package pkgid="bbf962fbe59a8faa27ca48f6b4180a26e260ecb562261da74b6135076036e804" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.7"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
</package>
<package pkgid="3eee59d5944faaba58d10b96eb4616d8ac16cdd87aa7f35fe570d106524c0548" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.9"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.8" date="1516968000">- Update openvswitch SELinux module
Resolves: rhbz#1538936</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.9" date="1519214400">- Update openvswitch policy from Fedora
Resolves: rhbz#1538936</changelog>
</package>
<package pkgid="d744fa231c1d2ff7cb9e135afa55ca699bacbc58571659334a08e75de1e9ad61" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.9"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.8" date="1516968000">- Update openvswitch SELinux module
Resolves: rhbz#1538936</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.9" date="1519214400">- Update openvswitch policy from Fedora
Resolves: rhbz#1538936</changelog>
</package>
<package pkgid="475da953ab1c8dea6a4cf685e017c17bc5596511923236128dd3c8108a4184bf" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.4"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-161" date="1496923200">- Allow httpd_t to read realmd_var_lib_t files Resolves: rhbz#1436689</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
</package>
<package pkgid="8f0dfc67995b5913be563a0ad270d1a125fdb9a13d064cec64ffbf9d184c6f0f" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.4"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-161" date="1496923200">- Allow httpd_t to read realmd_var_lib_t files Resolves: rhbz#1436689</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
</package>
<package pkgid="a9e9bfc8d82b26c94aa9aeb2a32ad67ffb1f33c213cc99a505287f0122cb6951" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.5"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
</package>
<package pkgid="2b345353f3d20676f88c93fc7daeb6604b9acfc21efc79014abc33226fecd315" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.5"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
</package>
<package pkgid="7faeda81ed18eac20eec9c5a13eed305c729f191032597348099c5b0011df44f" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.7"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
</package>
<package pkgid="ac121dad2fdce9a44b114e277a9794f83423bdc1ead1d03eba9ae8aea67c38e6" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.7"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
</package>
<package pkgid="302820e2f78755ac25fa56bc1a53681610a5ec88cd5174e8bab234f3edbb6707" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.9"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.8" date="1516968000">- Update openvswitch SELinux module
Resolves: rhbz#1538936</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.9" date="1519214400">- Update openvswitch policy from Fedora
Resolves: rhbz#1538936</changelog>
</package>
<package pkgid="c2f175039db952c5aa6430fcd767060c0e2de37e3f815eae0d5377200b159ea8" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.9"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.8" date="1516968000">- Update openvswitch SELinux module
Resolves: rhbz#1538936</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.9" date="1519214400">- Update openvswitch policy from Fedora
Resolves: rhbz#1538936</changelog>
</package>
<package pkgid="c3519cf5d458a0a3caa3a5d156c6fc08df18d3fffab0e93da4eda64842a974ce" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.4"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-161" date="1496923200">- Allow httpd_t to read realmd_var_lib_t files Resolves: rhbz#1436689</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
</package>
<package pkgid="dbd5d445b700d66c10815b91c59fe007ddc1af8960d5e4355b7509feae5fdc28" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.4"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-161" date="1496923200">- Allow httpd_t to read realmd_var_lib_t files Resolves: rhbz#1436689</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
</package>
<package pkgid="4c3a254851b9a67d5af14536f892c3da81dde74dfc826397b93375b9bfcf6632" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.5"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
</package>
<package pkgid="19836bc239beaeecbb39ff2cda52e2eacb1e5c69fff23bed9f45b67ea324ba98" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.5"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
</package>
<package pkgid="97a0f2f02e4f5b30eb60b0c1f6fa97e49ec7f0710633487cd180c3b694025c09" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.7"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
</package>
<package pkgid="269edf78452377f7f64f5a45ad389d10c9d1365aa6b64aee455c51a162904143" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.7"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
</package>
<package pkgid="ede7fe3c73e5d90a9a05fadab3ce8aceaeaeca247e25d49751862d9942cc2c59" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.9"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.8" date="1516968000">- Update openvswitch SELinux module
Resolves: rhbz#1538936</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.9" date="1519214400">- Update openvswitch policy from Fedora
Resolves: rhbz#1538936</changelog>
</package>
<package pkgid="322a9800130b3305f26f56621d0ef9520067c15ed2fb5d1c872dadeb91f3d77a" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.9"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.8" date="1516968000">- Update openvswitch SELinux module
Resolves: rhbz#1538936</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.9" date="1519214400">- Update openvswitch policy from Fedora
Resolves: rhbz#1538936</changelog>
</package>
<package pkgid="75980410208065e98ff9c690e59e284ad7f9ad1863e90eb60a0b088ecb9b8416" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.4"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-161" date="1496923200">- Allow httpd_t to read realmd_var_lib_t files Resolves: rhbz#1436689</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
</package>
<package pkgid="994e36537dea720d372b0dfbc635e78c511fa41d9ae9a4b5beebb22491da2367" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.4"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-161" date="1496923200">- Allow httpd_t to read realmd_var_lib_t files Resolves: rhbz#1436689</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
</package>
<package pkgid="d024cdfe70fdb85b6e319d1ad3549e53c4417774ce337aac8c6fc5adaab62f44" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.5"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
</package>
<package pkgid="223452439989d4374b0b4d198fc4c88b738159f9815490fa460920ff9baf3d7a" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.5"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
</package>
<package pkgid="82a68ba3affd099c9fbc8c3e8e48af923729d77e543c789d171b71884e567497" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.7"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
</package>
<package pkgid="99bdc850b6eb4264b464d4ccada819d2cb77be7856810041466b0e09f136992a" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.7"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
</package>
<package pkgid="f03ef01741021741d6dfbee482ed77f6d082c1a1721c33c647a92ce77b2143b6" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.9"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.8" date="1516968000">- Update openvswitch SELinux module
Resolves: rhbz#1538936</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.9" date="1519214400">- Update openvswitch policy from Fedora
Resolves: rhbz#1538936</changelog>
</package>
<package pkgid="82af563b33473c9d639aa48e4adc9af229c0b6584832f58f922dde3297a0643d" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.9"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.8" date="1516968000">- Update openvswitch SELinux module
Resolves: rhbz#1538936</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.9" date="1519214400">- Update openvswitch policy from Fedora
Resolves: rhbz#1538936</changelog>
</package>
<package pkgid="20cee8802b69c47beed082910e1a808af212cd14c58bae9dec33a2702fb99607" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.4"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-161" date="1496923200">- Allow httpd_t to read realmd_var_lib_t files Resolves: rhbz#1436689</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
</package>
<package pkgid="3b563d9eaaf47844126b9ad0655aa01ab9ec12eb98a4615a3736c248c02f258d" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.4"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-161" date="1496923200">- Allow httpd_t to read realmd_var_lib_t files Resolves: rhbz#1436689</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
</package>
<package pkgid="457976bce319e6d7422fef88bb49f37cc84bf5c2605bd85d77d2d9bc88923311" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.5"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
</package>
<package pkgid="3e4abf56c3627ae22fc42c93dcc609a5d7c76baa790c4ca44d9b32cdcf0eab83" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.5"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
</package>
<package pkgid="d9f424b3b2ebb4c2d39a16884d2829f6dba59def1c61941bb5e4859ae27d7115" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.7"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
</package>
<package pkgid="54f754dcee11b8d600cebaba9a2a545aa5bc5e99231484617dfd9a7d5fcf281a" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.7"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
</package>
<package pkgid="0e3365b258e1fb2d2e89d3f3648cb32b9951ff47484900a6eee62d524f7416e9" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.9"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.8" date="1516968000">- Update openvswitch SELinux module
Resolves: rhbz#1538936</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.9" date="1519214400">- Update openvswitch policy from Fedora
Resolves: rhbz#1538936</changelog>
</package>
<package pkgid="5b959f165ec26e4808a98464c354772ef9564f23577c447deb59c6ece8393aa6" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.9"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.8" date="1516968000">- Update openvswitch SELinux module
Resolves: rhbz#1538936</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.9" date="1519214400">- Update openvswitch policy from Fedora
Resolves: rhbz#1538936</changelog>
</package>
<package pkgid="a971532d91086eec91e72575ae028864ab2ba80c0bb31a5124db9124ece8d64a" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.4"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-161" date="1496923200">- Allow httpd_t to read realmd_var_lib_t files Resolves: rhbz#1436689</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
</package>
<package pkgid="664a2164a2122a1c6da6a3b14ecc2fe942ad82d6a40fb86c363a1fb6bd1cccb5" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.4"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-161" date="1496923200">- Allow httpd_t to read realmd_var_lib_t files Resolves: rhbz#1436689</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
</package>
<package pkgid="c756f773a24affce00c1ae7dc9c19c555da3071fbc263acae29200ef90b48f84" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.5"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
</package>
<package pkgid="8a8f85a7c91f68482c95535fbcd3b7a70ba9b39375ddaefa40a4d96c92c996bd" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.5"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-162" date="1497528000">- Allow unconfined_t user all user namespace capabilties.
Resolves: rhbz#1461488</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-163" date="1497960000">- Allow sssd_t to read realmd lib files.
Resolves: rhbz#1436689
- Add permission open to files_read_inherited_tmp_files() interface
Resolves: rhbz#1290633
Resolves: rhbz#1457106</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
</package>
<package pkgid="e7cb85096d991553647277196f38f43e0824ce4b8120c6d77735a5d09137926e" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.7"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
</package>
<package pkgid="ff2813af0768c15358b987d1e633076673b5a3e4c6e35a3e47f07b4444ef970e" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.7"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-164" date="1498046400">- Allow couple rules needed to start targetd daemon with SELinux in enforcing mode
Resolves: rhbz#1424621
- Add interface lvm_manage_metadata
Resolves: rhbz#1424621</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-165" date="1498478400">- Dontaudit staff_t user read admin_home_t files.
Resolves: rhbz#1290633</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
</package>
<package pkgid="40438653dad8e286749347bbb86ccaf8d978f4db4153f68f21a6802d21dfcc59" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.9"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.8" date="1516968000">- Update openvswitch SELinux module
Resolves: rhbz#1538936</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.9" date="1519214400">- Update openvswitch policy from Fedora
Resolves: rhbz#1538936</changelog>
</package>
<package pkgid="03aa55b3e9322f8198b1e632469151b46b1440671287ca9ccf21dc4d4fdcaf81" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="166.el7_4.9"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166" date="1499688000">- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.1" date="1502280000">- Allow llpdad send dgram to libvirt
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.2" date="1502366400">- Increase NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.3" date="1502366401">- Fixing wrong NVR
Resolves: rhbz#1479767</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.4" date="1503748800">- Allow tomcat_t domain couple capabilities to make working tomcat-jsvc
Resolves: rhbz#1485308</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.5" date="1504094400">- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.6" date="1507723200">- Allow tomcat domain to connect to mssql port
Resolves: rhbz#1500697
- Add keepalived domain setpgid capability
Resolves: rhbz#1500813</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.7" date="1510833600">- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.8" date="1516968000">- Update openvswitch SELinux module
Resolves: rhbz#1538936</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; - 3.13.1-166.9" date="1519214400">- Update openvswitch policy from Fedora
Resolves: rhbz#1538936</changelog>
</package>
<package pkgid="fdb260dc644f2e58e1eba8787edf0e1589ef41aa34d844cbed4dc7f402c8e9e2" name="slf4j" arch="noarch">
  <version epoch="0" ver="1.7.4" rel="4.el7_4"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.2-5" date="1354276800">- Build with xmvn</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.2-6" date="1357646400">- Rebuild to generate maven provides</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.2-7" date="1357732800">- Fix install location of manual</changelog>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 0:1.7.2-8" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:1.7.2-9" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.3-1" date="1363348800">- Update to upstream version 1.7.3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.4-1" date="1363780800">- Update to upstream version 1.7.4</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.4-2" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 01.7.4-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 0:1.7.4-4" date="1521547200">- Disallow EventData deserialization by default (CVE-2018-8088)</changelog>
</package>
<package pkgid="06e6150e25db578cd050935efa482dd88c0c688aefff7e1161fd56e50c303dad" name="slf4j" arch="noarch">
  <version epoch="0" ver="1.7.4" rel="4.el7_4"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.2-5" date="1354276800">- Build with xmvn</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.2-6" date="1357646400">- Rebuild to generate maven provides</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.2-7" date="1357732800">- Fix install location of manual</changelog>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 0:1.7.2-8" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:1.7.2-9" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.3-1" date="1363348800">- Update to upstream version 1.7.3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.4-1" date="1363780800">- Update to upstream version 1.7.4</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.4-2" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 01.7.4-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 0:1.7.4-4" date="1521547200">- Disallow EventData deserialization by default (CVE-2018-8088)</changelog>
</package>
<package pkgid="c248918a228a130eeff95d887cd26e15e9087968747792b85cdc4b99f0520554" name="slf4j" arch="src">
  <version epoch="0" ver="1.7.4" rel="4.el7_4"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.2-5" date="1354276800">- Build with xmvn</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.2-6" date="1357646400">- Rebuild to generate maven provides</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.2-7" date="1357732800">- Fix install location of manual</changelog>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 0:1.7.2-8" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:1.7.2-9" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.3-1" date="1363348800">- Update to upstream version 1.7.3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.4-1" date="1363780800">- Update to upstream version 1.7.4</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.4-2" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 01.7.4-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 0:1.7.4-4" date="1521547200">- Disallow EventData deserialization by default (CVE-2018-8088)</changelog>
</package>
<package pkgid="9394def53b3ae7c774f325ce7d22b0c9f125ae5fe4926bb7f0745ae3bcde23af" name="slf4j" arch="src">
  <version epoch="0" ver="1.7.4" rel="4.el7_4"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.2-5" date="1354276800">- Build with xmvn</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.2-6" date="1357646400">- Rebuild to generate maven provides</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.2-7" date="1357732800">- Fix install location of manual</changelog>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 0:1.7.2-8" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:1.7.2-9" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.3-1" date="1363348800">- Update to upstream version 1.7.3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.4-1" date="1363780800">- Update to upstream version 1.7.4</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.4-2" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 01.7.4-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 0:1.7.4-4" date="1521547200">- Disallow EventData deserialization by default (CVE-2018-8088)</changelog>
</package>
<package pkgid="1c85030afd8b6442409111112f2c602ca5a9c3d9c246e1b23122fac0122b8bc6" name="slf4j-javadoc" arch="noarch">
  <version epoch="0" ver="1.7.4" rel="4.el7_4"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.2-5" date="1354276800">- Build with xmvn</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.2-6" date="1357646400">- Rebuild to generate maven provides</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.2-7" date="1357732800">- Fix install location of manual</changelog>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 0:1.7.2-8" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:1.7.2-9" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.3-1" date="1363348800">- Update to upstream version 1.7.3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.4-1" date="1363780800">- Update to upstream version 1.7.4</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.4-2" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 01.7.4-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 0:1.7.4-4" date="1521547200">- Disallow EventData deserialization by default (CVE-2018-8088)</changelog>
</package>
<package pkgid="4e2d43dbbb547577267bcce3a454f5ef696817cbebbe12b8557230af3c42e3b8" name="slf4j-javadoc" arch="noarch">
  <version epoch="0" ver="1.7.4" rel="4.el7_4"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.2-5" date="1354276800">- Build with xmvn</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.2-6" date="1357646400">- Rebuild to generate maven provides</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.2-7" date="1357732800">- Fix install location of manual</changelog>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 0:1.7.2-8" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:1.7.2-9" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.3-1" date="1363348800">- Update to upstream version 1.7.3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.4-1" date="1363780800">- Update to upstream version 1.7.4</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.4-2" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 01.7.4-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 0:1.7.4-4" date="1521547200">- Disallow EventData deserialization by default (CVE-2018-8088)</changelog>
</package>
<package pkgid="b5b8b198518fc6381a17f91b796e29085f99ee5e56bf74efb32b932800541bbc" name="slf4j-manual" arch="noarch">
  <version epoch="0" ver="1.7.4" rel="4.el7_4"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.2-5" date="1354276800">- Build with xmvn</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.2-6" date="1357646400">- Rebuild to generate maven provides</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.2-7" date="1357732800">- Fix install location of manual</changelog>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 0:1.7.2-8" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:1.7.2-9" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.3-1" date="1363348800">- Update to upstream version 1.7.3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.4-1" date="1363780800">- Update to upstream version 1.7.4</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.4-2" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 01.7.4-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 0:1.7.4-4" date="1521547200">- Disallow EventData deserialization by default (CVE-2018-8088)</changelog>
</package>
<package pkgid="56cb985164b4b175a10d6b3332d8e4077d119c50a974c432ba1159e46d5c5c0c" name="slf4j-manual" arch="noarch">
  <version epoch="0" ver="1.7.4" rel="4.el7_4"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.2-5" date="1354276800">- Build with xmvn</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.2-6" date="1357646400">- Rebuild to generate maven provides</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.2-7" date="1357732800">- Fix install location of manual</changelog>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 0:1.7.2-8" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:1.7.2-9" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.3-1" date="1363348800">- Update to upstream version 1.7.3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.4-1" date="1363780800">- Update to upstream version 1.7.4</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.7.4-2" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 01.7.4-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 0:1.7.4-4" date="1521547200">- Disallow EventData deserialization by default (CVE-2018-8088)</changelog>
</package>
<package pkgid="026a5649d533f7b2178af8b670b790e99e47869a5679abb48f57876214a12dd7" name="sos" arch="noarch">
  <version epoch="0" ver="3.4" rel="13.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-5" date="1496145600">- [samba] Fix dc-connect winbind logfile path
  Resolves: bz1400407</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-6" date="1499860800">- [tripleo] Add ui logs
  Resolves: bz1470573</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-7" date="1507636800">- [openstack plugins] Tripleo specific containerized services
  Resolves: bz1463635
- [jars] Scan only /usr/{share,lib}/java by default
  Resolves: bz1482574
- [gluster_block] Added new plugin gluster_block
  Resolves: bz1491964</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-8" date="1507809600">- [gnocchi] Tripleo specific containerized services logs
  Resolves: bz1463635</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-9" date="1510747200">- [openstack_*] further updates to OSP plugins in containers
  Resolves: bz1511087</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-10" date="1511179200">- [postgresql] Collect data for postgreSQL from RHSCL
  Resolves: bz1515113</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-11" date="1512734400">- [postgresql] Call SCL pg_dump with proper path
  Resolves: bz1515113</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-12" date="1515067200">- [openstack_cinder] check for api service running
  Resolves: bz1511087
- [plugins] allow add_cmd_output to collect binary output
  Resolves: bz1515113</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-13" date="1515067201">- [plugins] allow add_cmd_output to collect binary output
  Resolves: bz1515113</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.4-13.el7.centos" date="1516881600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="e338efd02ee381a331d4aabb4c5b94f5a2b38dc8c772444f23725b9234b346c8" name="sos" arch="noarch">
  <version epoch="0" ver="3.4" rel="13.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-5" date="1496145600">- [samba] Fix dc-connect winbind logfile path
  Resolves: bz1400407</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-6" date="1499860800">- [tripleo] Add ui logs
  Resolves: bz1470573</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-7" date="1507636800">- [openstack plugins] Tripleo specific containerized services
  Resolves: bz1463635
- [jars] Scan only /usr/{share,lib}/java by default
  Resolves: bz1482574
- [gluster_block] Added new plugin gluster_block
  Resolves: bz1491964</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-8" date="1507809600">- [gnocchi] Tripleo specific containerized services logs
  Resolves: bz1463635</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-9" date="1510747200">- [openstack_*] further updates to OSP plugins in containers
  Resolves: bz1511087</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-10" date="1511179200">- [postgresql] Collect data for postgreSQL from RHSCL
  Resolves: bz1515113</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-11" date="1512734400">- [postgresql] Call SCL pg_dump with proper path
  Resolves: bz1515113</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-12" date="1515067200">- [openstack_cinder] check for api service running
  Resolves: bz1511087
- [plugins] allow add_cmd_output to collect binary output
  Resolves: bz1515113</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-13" date="1515067201">- [plugins] allow add_cmd_output to collect binary output
  Resolves: bz1515113</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.4-13.el7.centos" date="1516881600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="d02dbcf108d38a3179f159a5c6232ce1964cd96f10afb1365d6b90200a799957" name="sos" arch="src">
  <version epoch="0" ver="3.4" rel="13.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-5" date="1496145600">- [samba] Fix dc-connect winbind logfile path
  Resolves: bz1400407</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-6" date="1499860800">- [tripleo] Add ui logs
  Resolves: bz1470573</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-7" date="1507636800">- [openstack plugins] Tripleo specific containerized services
  Resolves: bz1463635
- [jars] Scan only /usr/{share,lib}/java by default
  Resolves: bz1482574
- [gluster_block] Added new plugin gluster_block
  Resolves: bz1491964</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-8" date="1507809600">- [gnocchi] Tripleo specific containerized services logs
  Resolves: bz1463635</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-9" date="1510747200">- [openstack_*] further updates to OSP plugins in containers
  Resolves: bz1511087</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-10" date="1511179200">- [postgresql] Collect data for postgreSQL from RHSCL
  Resolves: bz1515113</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-11" date="1512734400">- [postgresql] Call SCL pg_dump with proper path
  Resolves: bz1515113</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-12" date="1515067200">- [openstack_cinder] check for api service running
  Resolves: bz1511087
- [plugins] allow add_cmd_output to collect binary output
  Resolves: bz1515113</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-13" date="1515067201">- [plugins] allow add_cmd_output to collect binary output
  Resolves: bz1515113</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.4-13.el7.centos" date="1516881600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="9be6036a8640fa546bdd502a2ca52591e0260de4c23a8dd7c9962e8e91f9aa1d" name="sos" arch="src">
  <version epoch="0" ver="3.4" rel="13.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-5" date="1496145600">- [samba] Fix dc-connect winbind logfile path
  Resolves: bz1400407</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-6" date="1499860800">- [tripleo] Add ui logs
  Resolves: bz1470573</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-7" date="1507636800">- [openstack plugins] Tripleo specific containerized services
  Resolves: bz1463635
- [jars] Scan only /usr/{share,lib}/java by default
  Resolves: bz1482574
- [gluster_block] Added new plugin gluster_block
  Resolves: bz1491964</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-8" date="1507809600">- [gnocchi] Tripleo specific containerized services logs
  Resolves: bz1463635</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-9" date="1510747200">- [openstack_*] further updates to OSP plugins in containers
  Resolves: bz1511087</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-10" date="1511179200">- [postgresql] Collect data for postgreSQL from RHSCL
  Resolves: bz1515113</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-11" date="1512734400">- [postgresql] Call SCL pg_dump with proper path
  Resolves: bz1515113</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-12" date="1515067200">- [openstack_cinder] check for api service running
  Resolves: bz1511087
- [plugins] allow add_cmd_output to collect binary output
  Resolves: bz1515113</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-13" date="1515067201">- [plugins] allow add_cmd_output to collect binary output
  Resolves: bz1515113</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.4-13.el7.centos" date="1516881600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="fae86be3bab232bf9e9d62b852afd2de1b5f046fc5d0bc160aae17e11ec0cff1" name="spice" arch="src">
  <version epoch="0" ver="0.12.8" rel="2.el7.1"/>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; 0.12.4-15" date="1443009600">- CVE-2015-5260 CVE-2015-5261 fixed various security flaws
  Resolves: rhbz#1267134</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.12.4-16" date="1461585600">- Use autosetup
  Related: CVE-2016-0749
- Fix heap-based memory corruption within smartcard handling
  Resolves: CVE-2016-0749
- Fix host memory access from guest with invalid primary surface parameters
  Resolves: CVE-2016-2150</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.12.4-17" date="1461758400">- Fix crash when the client sends a wrong header (for example when using spice-html5)
  Resolves: rhbz#1281442
- Fix crash when guest provides wrong address
  Resolves: rhbz#1264356
- Fix thread-safety issue causing a crash when playing a Youtube video spanning
  multiple monitors
  Resolves: rhbz#1253375
- Add patches reducing QEMU wake-ups
  Related: rhbz#912763, rhbz#1186146
- Fix use-after-free after resetting a VM
  Resolves: rhbz#1281455
- Send KeepAlive probes every 10 minutes
  Resolves: rhbz#1298590
- Add client to guest volume synchronization
  Resolves: rhbz#1264107</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.12.4-18" date="1467374400">- Fix crash when connecting to VM using smartcard passthrough
  Resolves: rhbz#1340899
- Fix hang after unredirecting a USB device
  Resolves: rhbz#1338752
- Backport spice_qxl_set_max_monitors()
  Resolves: rhbz#1283202</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.4-19" date="1473422400">- Ensure SPICE_MIGRATE_COMPLETED is sent in all cases when it's needed.
  Resolves: rhbz#1352836</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.12.4-20" date="1481284800">- Fix buffer overflow in main_channel_alloc_msg_rcv_buf when reading large
  messages.
  Resolves: CVE-2016-9577
- Fix remote DoS via crafted message.
  Resolves: CVE-2016-9578</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-1" date="1484568000">- Rebase to spice-server 0.12.8
  Resolves: rhbz#1388947
  Resolves: rhbz#1377551
  Resolves: rhbz#1283202</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-2" date="1493121600">- Drop clients immediatly if the magic they send is wrong
  Resolves: rhbz#1416692</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-3" date="1498824000">- Prevent potential buffer/integer overflows with invalid MonitorsConfig messages
  sent from an authenticated client
  Resolves: CVE-2017-7506</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-2.1" date="1499256000">- Redo build properly versioned as a zstream build
  Related: CVE-2017-7506</changelog>
</package>
<package pkgid="1c9455ada87d21bb2426dc2c9de73600f4ca66015454ba39a323806445cece37" name="spice-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.12.8" rel="2.el7.1"/>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; 0.12.4-15" date="1443009600">- CVE-2015-5260 CVE-2015-5261 fixed various security flaws
  Resolves: rhbz#1267134</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.12.4-16" date="1461585600">- Use autosetup
  Related: CVE-2016-0749
- Fix heap-based memory corruption within smartcard handling
  Resolves: CVE-2016-0749
- Fix host memory access from guest with invalid primary surface parameters
  Resolves: CVE-2016-2150</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.12.4-17" date="1461758400">- Fix crash when the client sends a wrong header (for example when using spice-html5)
  Resolves: rhbz#1281442
- Fix crash when guest provides wrong address
  Resolves: rhbz#1264356
- Fix thread-safety issue causing a crash when playing a Youtube video spanning
  multiple monitors
  Resolves: rhbz#1253375
- Add patches reducing QEMU wake-ups
  Related: rhbz#912763, rhbz#1186146
- Fix use-after-free after resetting a VM
  Resolves: rhbz#1281455
- Send KeepAlive probes every 10 minutes
  Resolves: rhbz#1298590
- Add client to guest volume synchronization
  Resolves: rhbz#1264107</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.12.4-18" date="1467374400">- Fix crash when connecting to VM using smartcard passthrough
  Resolves: rhbz#1340899
- Fix hang after unredirecting a USB device
  Resolves: rhbz#1338752
- Backport spice_qxl_set_max_monitors()
  Resolves: rhbz#1283202</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.4-19" date="1473422400">- Ensure SPICE_MIGRATE_COMPLETED is sent in all cases when it's needed.
  Resolves: rhbz#1352836</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.12.4-20" date="1481284800">- Fix buffer overflow in main_channel_alloc_msg_rcv_buf when reading large
  messages.
  Resolves: CVE-2016-9577
- Fix remote DoS via crafted message.
  Resolves: CVE-2016-9578</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-1" date="1484568000">- Rebase to spice-server 0.12.8
  Resolves: rhbz#1388947
  Resolves: rhbz#1377551
  Resolves: rhbz#1283202</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-2" date="1493121600">- Drop clients immediatly if the magic they send is wrong
  Resolves: rhbz#1416692</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-3" date="1498824000">- Prevent potential buffer/integer overflows with invalid MonitorsConfig messages
  sent from an authenticated client
  Resolves: CVE-2017-7506</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-2.1" date="1499256000">- Redo build properly versioned as a zstream build
  Related: CVE-2017-7506</changelog>
</package>
<package pkgid="b85aa787a6a2e85b647fac06dfe16011f80940acc398560fd325bf9441b5bcf5" name="spice-glib" arch="i686">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="0aa47bab1cbda8a0b1210007d4e1d99ceac09787b6caa09f72e5d84bc2e9e65f" name="spice-glib" arch="x86_64">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="2edf4c6d7bbfaf6cbf47ade5312c433df7ace8669c68b011b7cec98cf9d241da" name="spice-glib-devel" arch="i686">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="5c7eab6304b7041c5d0496d8539228283e9a78bd17575111428e0a74139bdb81" name="spice-glib-devel" arch="x86_64">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="49877f137f7d09112bd8f9f339d16f10fbb0da52e1dbf4d82ab4db6bf0502b38" name="spice-gtk" arch="src">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="04c73bf70973fa3c76015f0aa2e515f4abfdb94a60d2e77af697d1438e708d0d" name="spice-gtk" arch="src">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="81897e78a1e78845a08bc6f9e9d41d2fed05c7b6cd34e825c29c78e254bfff56" name="spice-gtk-debuginfo" arch="i686">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="84ce22ef0bdf65440fcf70d9b988417f6a23af6305adf830c5c7b74cea082755" name="spice-gtk-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="5ca52424755756ab3ca7006f5de9f2acc533e60632935e0fbed13a04fc1e9e96" name="spice-gtk-tools" arch="i686">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="0d29a42cc3296a8d29d24545fc9fd7d32821927ffb43928c3145dfa862376ab5" name="spice-gtk-tools" arch="x86_64">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="7a6ce08edb46b8f2d6eccf6d18be8a5fed1eafc6112169e9b6992ada562ecb7c" name="spice-gtk3" arch="i686">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="a326acbf8555fc23d3ffb880ef22727e3e097414d71ec264fa67671a9809e2a2" name="spice-gtk3" arch="x86_64">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="a30489da5e44fc8d1e8cf51ae2013c5e63ae97558749edcf0d210b446337bcc8" name="spice-gtk3-devel" arch="i686">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="f9f77c56f625636bb160822faf889e30fde86df11c6c6afb7d49825e228a9563" name="spice-gtk3-devel" arch="x86_64">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="35482ad26e7919c9c710bd6c36b34392ee508bfe0cdcfde3cf025503bb33a944" name="spice-gtk3-vala" arch="i686">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="ea8fc11785636e55de8a9c8956f3d6d7c43ae72abdf3b5919db6b0f8b6424944" name="spice-gtk3-vala" arch="x86_64">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="abb63226dd1bc9f30d4939422682bb30520c7dace5040edb2622078dc95bebb3" name="spice-server" arch="x86_64">
  <version epoch="0" ver="0.12.8" rel="2.el7.1"/>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; 0.12.4-15" date="1443009600">- CVE-2015-5260 CVE-2015-5261 fixed various security flaws
  Resolves: rhbz#1267134</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.12.4-16" date="1461585600">- Use autosetup
  Related: CVE-2016-0749
- Fix heap-based memory corruption within smartcard handling
  Resolves: CVE-2016-0749
- Fix host memory access from guest with invalid primary surface parameters
  Resolves: CVE-2016-2150</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.12.4-17" date="1461758400">- Fix crash when the client sends a wrong header (for example when using spice-html5)
  Resolves: rhbz#1281442
- Fix crash when guest provides wrong address
  Resolves: rhbz#1264356
- Fix thread-safety issue causing a crash when playing a Youtube video spanning
  multiple monitors
  Resolves: rhbz#1253375
- Add patches reducing QEMU wake-ups
  Related: rhbz#912763, rhbz#1186146
- Fix use-after-free after resetting a VM
  Resolves: rhbz#1281455
- Send KeepAlive probes every 10 minutes
  Resolves: rhbz#1298590
- Add client to guest volume synchronization
  Resolves: rhbz#1264107</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.12.4-18" date="1467374400">- Fix crash when connecting to VM using smartcard passthrough
  Resolves: rhbz#1340899
- Fix hang after unredirecting a USB device
  Resolves: rhbz#1338752
- Backport spice_qxl_set_max_monitors()
  Resolves: rhbz#1283202</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.4-19" date="1473422400">- Ensure SPICE_MIGRATE_COMPLETED is sent in all cases when it's needed.
  Resolves: rhbz#1352836</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.12.4-20" date="1481284800">- Fix buffer overflow in main_channel_alloc_msg_rcv_buf when reading large
  messages.
  Resolves: CVE-2016-9577
- Fix remote DoS via crafted message.
  Resolves: CVE-2016-9578</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-1" date="1484568000">- Rebase to spice-server 0.12.8
  Resolves: rhbz#1388947
  Resolves: rhbz#1377551
  Resolves: rhbz#1283202</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-2" date="1493121600">- Drop clients immediatly if the magic they send is wrong
  Resolves: rhbz#1416692</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-3" date="1498824000">- Prevent potential buffer/integer overflows with invalid MonitorsConfig messages
  sent from an authenticated client
  Resolves: CVE-2017-7506</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-2.1" date="1499256000">- Redo build properly versioned as a zstream build
  Related: CVE-2017-7506</changelog>
</package>
<package pkgid="e4d0da0afbbde9c207bb7492c6fdba7b218eae2eaeab445bbf7c5c29299e0e65" name="spice-server-devel" arch="x86_64">
  <version epoch="0" ver="0.12.8" rel="2.el7.1"/>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; 0.12.4-15" date="1443009600">- CVE-2015-5260 CVE-2015-5261 fixed various security flaws
  Resolves: rhbz#1267134</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.12.4-16" date="1461585600">- Use autosetup
  Related: CVE-2016-0749
- Fix heap-based memory corruption within smartcard handling
  Resolves: CVE-2016-0749
- Fix host memory access from guest with invalid primary surface parameters
  Resolves: CVE-2016-2150</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.12.4-17" date="1461758400">- Fix crash when the client sends a wrong header (for example when using spice-html5)
  Resolves: rhbz#1281442
- Fix crash when guest provides wrong address
  Resolves: rhbz#1264356
- Fix thread-safety issue causing a crash when playing a Youtube video spanning
  multiple monitors
  Resolves: rhbz#1253375
- Add patches reducing QEMU wake-ups
  Related: rhbz#912763, rhbz#1186146
- Fix use-after-free after resetting a VM
  Resolves: rhbz#1281455
- Send KeepAlive probes every 10 minutes
  Resolves: rhbz#1298590
- Add client to guest volume synchronization
  Resolves: rhbz#1264107</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.12.4-18" date="1467374400">- Fix crash when connecting to VM using smartcard passthrough
  Resolves: rhbz#1340899
- Fix hang after unredirecting a USB device
  Resolves: rhbz#1338752
- Backport spice_qxl_set_max_monitors()
  Resolves: rhbz#1283202</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.4-19" date="1473422400">- Ensure SPICE_MIGRATE_COMPLETED is sent in all cases when it's needed.
  Resolves: rhbz#1352836</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.12.4-20" date="1481284800">- Fix buffer overflow in main_channel_alloc_msg_rcv_buf when reading large
  messages.
  Resolves: CVE-2016-9577
- Fix remote DoS via crafted message.
  Resolves: CVE-2016-9578</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-1" date="1484568000">- Rebase to spice-server 0.12.8
  Resolves: rhbz#1388947
  Resolves: rhbz#1377551
  Resolves: rhbz#1283202</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-2" date="1493121600">- Drop clients immediatly if the magic they send is wrong
  Resolves: rhbz#1416692</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-3" date="1498824000">- Prevent potential buffer/integer overflows with invalid MonitorsConfig messages
  sent from an authenticated client
  Resolves: CVE-2017-7506</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-2.1" date="1499256000">- Redo build properly versioned as a zstream build
  Related: CVE-2017-7506</changelog>
</package>
<package pkgid="f52131526d6d335f979bbf70f70cffbe187ea19adecf23930558d98c05245c7d" name="sssd" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="fcfc9a517dd37375cdc2ec2dd1aa46bc046c827755615a102381a444e85f4e93" name="sssd" arch="src">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="c6f9734a5e7a4329bba1be74dffc65200132191bc3e83ea1af3be5f9d95edb28" name="sssd" arch="src">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="a82df18c4f3110607d732cfc3e14b3339299e589b9700050d9b41bb8c2d891a7" name="sssd" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="701bed6fe04a8d8d662aad9f4f48c3a9bca71fe768fba476a5c05a1ca826c7e2" name="sssd" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="f19dbadb4da64beb6f741a742d722d36451c69cc05685a3e65481d8bbc926768" name="sssd" arch="src">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="1dfd253d9d2e4fd9ec86c3ebf6b10abb27ac0871c7cbadb8fdb4d4ebc4bd7a26" name="sssd" arch="src">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="8a1de5ffb5c83967560af440ad34738b4c733bbd6fd4b2362a2ba5b2c85b9eb4" name="sssd" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="1cdd15a02181e0c758e127fa4342f4292db97487711b6049d99867bf51b1cf66" name="sssd" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="5850883c60678c02bf98b66193453c6b8aa1b641db9ffaef644ccd44ce3bd7b4" name="sssd" arch="src">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="7f9bbf691def234c1cf165936877848a939141d7d375e3769a1613f049cd578e" name="sssd" arch="src">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="f0e30888eb17986a9878e4a4148083bb351ac4287f6491636cf5ccc150d7964c" name="sssd" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="1f37786a2a58ad68282a7ca57a379d8381888df95afd8f4b7b49501f1782c663" name="sssd" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="de8425aa0db5aaae1f221a5d233aa67549d16d2d35c4556d0b65b5ab29a6b5c7" name="sssd" arch="src">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="cfa91da1bedbcf2865ead50c758c9de1771a19061307cda2025a204224552c38" name="sssd" arch="src">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="4e7f55a8816ff3d6a0824b93f43b75b047edd1ef9b62727f741341114bef7f53" name="sssd" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="a4a8e1f19aff089bde0bce7a73bf65a67248a5f2718254a908fc5caef922e88c" name="sssd-ad" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="31b3920d8024d5bbca30315e0e93b64efac806bc3f69cb1e25dca9c2f6f472a7" name="sssd-ad" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="cb02f3d273789b00806de985fe4edaca63fe72e6ff0dbd714880e74d0d09a036" name="sssd-ad" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="21e3ff4774bc70583b31cc563a6505b56dfe07f4061f7234207023b5994c0f88" name="sssd-ad" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="863e7743eb561a17467049c8f409fdbb8d72746c8602b08bbbf06ea83ab8dc05" name="sssd-ad" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="020ba3ace5b789b5d1fab08b65d58e88079e5753a3081ff1f032479d03be191e" name="sssd-ad" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="556713d746f7f1ca445cacb3497876706d68ee6e934c933ad84a5d74ee29ebcb" name="sssd-ad" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="fe761a00431e00203b00ae2fe8af42d1217304ce01da347a37bb2dc273b52799" name="sssd-ad" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="9367fea78aa51bc0fa019f91928e2227f37be40577ced2f862f410476d2ab939" name="sssd-client" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="9b7591e417fb6586c2f80cc92b1165b25bc0e9b608ca52efbfe61b411ed06f50" name="sssd-client" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="406431b599383aaecce9a499483bb5920bf8c1c419a67f46341a4e2891f135d4" name="sssd-client" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="c92ce479220d6959e87e13af61210eb77212c8a0ffa4ee0cddb66963041d1a9a" name="sssd-client" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="132609aa12da7ce8583aa9db45002454a32f88a32e3d613748118f5a432ef479" name="sssd-client" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="7474f81f3958cc94b5d22ac043b613d112f400ea89aa22dd70394583dec88bad" name="sssd-client" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="cbe69b6ab7953aaaed5d528c5775027cf034c25b7baee6eeb9f1f3b86f92d8ca" name="sssd-client" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="a46d5af0c1eb6b7762d282925c534d85a8827114a0cface763c2241dbbc3c64d" name="sssd-client" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="a19e9e8d715ab0de3ac4f6b0b9b9ef1da8c222dd6170be249a4bdacac90c5687" name="sssd-common" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="32bd711afec8e52edfadd201b74a755fe9ccdaa80436a6474a2ec73e202f03a4" name="sssd-common" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="bde2af82d57ff0da527b9fbfe8fcec4bc506635706b422d90e49a3a7c5ad085f" name="sssd-common" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="c559c81211f54f8656a32bf4512f5c94fbf82ebe909372de1211fcacfd89fddd" name="sssd-common" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="80b1ae3324be2ba0e1a3e812a6dc83463244344e2b018158adcb28d5cb3120da" name="sssd-common" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="658b32d2feaf9bb9d4cfa41aec23cde43f97abdd47042d69f0d506c31a549b0a" name="sssd-common" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="82d26e33095d5150edb1381ef1e3f787d9eab36868198b876cc4bf8e903d0876" name="sssd-common" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="fb1530c4685ca91eb77cb35332bbe1b2a6cce3637c6a6ba4bbc1ea6fc068dc4e" name="sssd-common" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="c5f864b01c8aa8608ce280ad782fb80051157b34eba9ee8e66073a4b60a458d8" name="sssd-common-pac" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="0695bb958589c4a31c8dfec34be712eedf39ff36560a32d6e0e15d7052032571" name="sssd-common-pac" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="98e4d13cb392afc51e4dfdd3bb7448e1e7e3d44fc02369fd753cc535c9b7f950" name="sssd-common-pac" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="73baf73e8eab0527561f046a3912119bb62671038e965e2aade779754667a9ad" name="sssd-common-pac" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="37472de28e4d52beec3fd91dcfaf287ce590c74b0110aa1f967db81fad689773" name="sssd-common-pac" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="14c7ddecda2510b41a908450e85f5a43bad5f8fb81fa3d8e7257da33b1c19ed3" name="sssd-common-pac" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="30cd14ab66a92b18ddf621ff3e1663106bb23a52976cfc3765ec32a2b9f66aae" name="sssd-common-pac" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="57aac55574d1fa003ed979025470506f8cb2c51bab4c2fe73607cadca7894240" name="sssd-common-pac" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="6eabb11a11fadf194b3679920cfcdeddc7be18882a2cde65df5fe52b3de0b5e4" name="sssd-dbus" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="7376a194844864bca761944e277f60ae6497d4e3c0f76e13c1d2a50188f3e63c" name="sssd-dbus" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="d36f909bb19725a8dbd68924036726e5aefabec0c39cae2ce51daa450c47adb2" name="sssd-dbus" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="732152a7987f90d9541d204e211e6bf18c80908529feffeb6ef5fef9471629ca" name="sssd-dbus" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="e99da61236f2766d0c3bc2870558bdfd1a0070cdca37f0af487ffb53dd88b900" name="sssd-dbus" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="c648ec53f82c3aba596c95d67e656b83ffc09cbaa26672faf13e67aeb002170a" name="sssd-dbus" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="4b9ebb44c2df1c418baf837b563c68dd24ded4a1cb018d8847d934f163b1a42d" name="sssd-dbus" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="9b077aec2415bd3e2813a3e0088e815817684d618e5abded3b5bce5e40f3cc19" name="sssd-dbus" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="3a7e82db1e9cfa3031129351cffc86157444c6719c6d997346f7266a8df211a7" name="sssd-debuginfo" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="44a9eca998ce023986935bc51b74a4e10f1c0afeba450a551f5a8508704195bd" name="sssd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="974bada15e5f9cf86c3a7dece1bd2f985e24cb2521a892890dc25109dee43049" name="sssd-debuginfo" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="202fc7da40165263d36ee7c656ecd652661d42b1068e56f6813766244078b6ac" name="sssd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="16245ec6b4c61cab340db23bd9cc05055d800fb8be92924647f6973136ae5291" name="sssd-debuginfo" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="71b84b05389419a05d03f05767db4fac553072abab108f03ca862a6166fc6ebe" name="sssd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="3300bb6b050be213505dbba1c2522d900784257ede0122dfee12fb2fe1a7e560" name="sssd-debuginfo" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="f9735b30cfe646bfa675bc59376aac91a2213235b1db3331265e17b88cbb8ac0" name="sssd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="2fdacafe57a109416ed7c805fdb3b86888f62bd149e85a513f3ea5c8058941fd" name="sssd-ipa" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="d37deea76220155b653e65a4c02f4aa56c68676e3516b22c9c4257e70cd6e12f" name="sssd-ipa" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="4e10fd8e315316f4af28c2a0c6fb8aca7f895770a29aa21c06a82d3558cb5a0c" name="sssd-ipa" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="021e56694da0160ca6992dd16b72eb54e8e5ee329880db76a0cf9791db163ac0" name="sssd-ipa" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="500ef3147ef059b39d73456ccf49ae505b1cdffbece4c471687d2f82275c1c39" name="sssd-ipa" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="1177256677714666c3a8519547631fff42fe7a3806398d7a3e63fa515b1a4532" name="sssd-ipa" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="b6b12d6df5b85142491d034cb3ceb3c224d53fd0a079269442e365bdb2a1107b" name="sssd-ipa" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="3d1fdf5996bae4ec9b5e08bafc19de85112e7ec4a0bb6b2d18224d0d8821bf31" name="sssd-ipa" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="ad4330e063c5b461cc2eda08e31e0965a39e8d87bf963d2e2cc1a1705d80de83" name="sssd-kcm" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="b468395588f86f66e35afe8a9ac328ec35b50b83e4deb5cf3f4a7db6316fde58" name="sssd-kcm" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="01a68927244980cdfad86232bb509259836b941e8810367070c8cb947008162c" name="sssd-kcm" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="c21f5bbde7529f99bf191411a12e58f352779e9396ca4059fecc1aadd957c279" name="sssd-kcm" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="b29d1d7aaac9fbe4d011c9a1c2a9f77019e882c8b91533b82c9c022c45fd9c92" name="sssd-kcm" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="617ecce097d7f592729b8571af691ae5fdb7738b669ce96327fb641dc95a87a9" name="sssd-kcm" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="e926fb1f74cd1b8c6aa422079a66c98521e35bb20b9a181ec042b30ed64d868e" name="sssd-kcm" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="a546149e06344b71912c60c5deaeb97349d891016cb3dcd815bdc162acbb1a52" name="sssd-kcm" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="cdbf60b4c03f0199316cb99c3f0ab42df80512f433f5daa5335ab12ba48e20b5" name="sssd-krb5" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="0fd09243df09f06ffc0668b651f8cc21dd015f1b9a6d265b7b166d6e0b71e56a" name="sssd-krb5" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="20de426b8744c1ba9711af40b86f7ba935dc1ec7702886f381635d998145029a" name="sssd-krb5" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="844b5ae9bd5c571457b58991126e4bfd0cc204f3ecf873ac0b98d5e16057bce4" name="sssd-krb5" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="0c96690b667982684544965f1d06e302799d4b09c6430bf337770e2074194c79" name="sssd-krb5" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="7ef4798898bf6ea40412972e7eb2f894ece450de3b786115856e41d635ce407a" name="sssd-krb5" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="17da0c0babe97a8e6ec2a1ffcac2f6ea6c3b9260c811feeb5947818ebb984c19" name="sssd-krb5" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="5d3600412d112a0153435213b4fda6ec20dd1ca90209349cb2d9e16bc7cd3908" name="sssd-krb5" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="d4b9254011bb23965280e853eaa23134b91ac443b1074daededd8e4f990d381e" name="sssd-krb5-common" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="417ede675d33ff32cc525ed0d6282c79e074ec5ef5783587d5fe1076ebc84bdc" name="sssd-krb5-common" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="4f11338b660e250a3fd8e5ffee26b901c9438fbe055876ca242d52dba4051e4f" name="sssd-krb5-common" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="c94b9ca0c9d6ebc19aa37010f89a13652043e345d509ac2bd10c0ee310690e9a" name="sssd-krb5-common" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="b608b8b71954c7cac1945d7844d0d6f8c2241b9d536bee81a5c4845cf599f45c" name="sssd-krb5-common" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="7281e47071ee0debe5a34909959d9915af18333bb4ab364e0d9a15cffa9af6c8" name="sssd-krb5-common" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="33c1edef2e2a37132f522d84a6921d698ac217d25a73766638e21bf40ffce63f" name="sssd-krb5-common" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="0c6adc53dc5a0810e6a1241a408c00ede23e6b65e9ca79e001fac25dca5f54a9" name="sssd-krb5-common" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="7a46908b44ae27b26aa096d3769e405322e39ef98398246e53f635ced644917a" name="sssd-ldap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="b587ef5fc01a31c309385b1434c5c92d676b8658e09124c952e1ad3c02f840a2" name="sssd-ldap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="2cfe8ab5eb0e873601dddd8f9ab98cf8f3ef9adf359d173f7d7e62b4802f320b" name="sssd-ldap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="a60ca7f390ee21fd2bf12701a85a476d3aa4356c82f9fa1205a1329d6f65010b" name="sssd-ldap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="cbe3ce1dcd543170231f35a7d21993a31f1521db865885401e35c22581dc24f7" name="sssd-ldap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="f78cd195a4ce1d49ec5dfc032f8c591f6c936bdc8b4c7efab244185e30aa14ef" name="sssd-ldap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="dad10604d57ae018230facb2a7dfc6c13f866d0b04f52dc48ccca88e8121bc27" name="sssd-ldap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="2789ff1f9f1dd6fd8a4c2123cf52f1ceaad3a20a60f7b5cc92e294853ded4c4f" name="sssd-ldap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="7606a40dc8fb2fe7d091ee0039101c1a04ac472b0a1110008d09611e393233f2" name="sssd-libwbclient" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="a3456a9c1f3c1c7b1c0daba0be1192b70fe0259002affd783566ac57b93746ca" name="sssd-libwbclient" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="3896e627d5f38d076d9abd078df580745100c3f0869c751d4ac638fb408e4c31" name="sssd-libwbclient" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="4ccabdc5c62d4d678ead2331661d5d3ed5b71149428533c61caf03cd097bdeaf" name="sssd-libwbclient" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="1897285dabcbba1e3c7f35eb16a45f879f9e020357e59a33b9edc40467f739c8" name="sssd-libwbclient" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="bb0d57237d517eed595ed5ed8f449640a69946d7fa0afdbc3b43418dcbb95dda" name="sssd-libwbclient" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="8e24eec66c3da7295a3bcc2df40be6bfe66b14f1b989a6e06403fe172dfb5d25" name="sssd-libwbclient" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="756479c8b17464f5b4ef68471e24371e433093b0ed891e795c16e287ced2bcc6" name="sssd-libwbclient" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="3e88c6c998a73c2de51b3d3554e8b13562d8c6dfcaf1a6e701f43f8333bd3899" name="sssd-libwbclient-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="2f94bb532f9cd4c77849eed03732e2579d7cf0353ee0515702a04401ce9d66b8" name="sssd-libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="b03afdc39677518c13104954e70f322e62d821bc7cd714b5812089982fea3fe2" name="sssd-libwbclient-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="985051566e65ffd39a6a867e0fb58fa536728cfb54a44eeea4ef99dacb58e96a" name="sssd-libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="fa7d76dac344a729523e323b72fa4b9e53394b59b606b99e9d1e8a87c653f066" name="sssd-libwbclient-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="5b84f43c53f53f15d84b32419f3e897406dd7a551d90016260ea1c07c677ce71" name="sssd-libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="898f689fb7d84a1b88abbba032d312b86d52f03f259cdd60d5ba97710408f966" name="sssd-libwbclient-devel" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="eb97c2d680bf3eecffbf61f022dfea7c6ceb30222e043d9e113341872b16f48e" name="sssd-libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="9302c84991e67f7c52b4c0fbe29d169902385c461ff24bc9ccb215b77daebe34" name="sssd-polkit-rules" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="6d9915de1b113b21fc90fb592ce9a5dd0c85387ae3fdd525c048ee80d6f103f5" name="sssd-polkit-rules" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="86a536d76f95df77e0843e549ff7d3b1f87fb05ec2c5aee5e738432c393d5eda" name="sssd-polkit-rules" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="9b6d5a3fa1987f5875d6898e7d726c973bb6715df8442c5496628d8fb386ce94" name="sssd-polkit-rules" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="0b3e91af05bbe7f4a9f69320a9a1aaa062f57904439478271fd0e7db10595746" name="sssd-polkit-rules" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="347d254774bca0699d6ef6e137249d1dbc55d920bd53c4d1b4fbb09845873fe3" name="sssd-polkit-rules" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="d2f96273c651f9d988faa25014e87013c4d0a7acc36c3d874b27965336e177f2" name="sssd-polkit-rules" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="61e81550390260a3494b67248b6f5d96fdba627e8d3b0544d2b0b962a71c27c0" name="sssd-polkit-rules" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="b125758877b8ed4b0d6139a5b60748cf25d5ac594eadce79182489f6729fbc7f" name="sssd-proxy" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="16107048c7363af975c26b8d808af901ac2990902ed5c13c1bf03abe76e222ef" name="sssd-proxy" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="1eb583a9616975cb37ca55ba2749ca57b5fe45a413e40cae42b06e1b3a7f6d1f" name="sssd-proxy" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="885157633f8a4569be2714d9ad2b5f45a85867600b55667f5cd8957921d1647e" name="sssd-proxy" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="9b71c4feeaab02f84c41ebd21a92d6dcb7b379101d209cec38b14ed7d5bea63c" name="sssd-proxy" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="c2cd88b886477c496b1683e9aa3bba67d707b6a248fabd1cd0f6fc27e03189df" name="sssd-proxy" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="b1b75cdc8f14092262e1eb349664e52a99b7e9c5e910ee472b12436324c967a9" name="sssd-proxy" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="3111467853d115e1342be2501c3c4b36e2bbe07d8eebefb93ab4258e2066034a" name="sssd-proxy" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="b33ead16689e971f34e46cb44cdd2b22b18c136cb7b86031b1c0e51b196b4591" name="sssd-tools" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="0ab575275707df9cc68dede55f17d227330dc78112bdea2478f095910bac7224" name="sssd-tools" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="761b9b66e6f3fe3cd24c00fa2dc2f46dff59e59eeed9bec32e7176b455eb4da1" name="sssd-tools" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="a5a33581f26e7ddcd3f601824bace8bb4cbe3ff8b0e0bcee3f205507d4de26f9" name="sssd-tools" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="db47cd94fe341ead4f0fa295157a821c6393bb2bc4f5fbd508003820437b5bab" name="sssd-tools" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="6b3065937908484bd3a86b841f4c0b1593d4294fad1dbaaa470e162716a94f31" name="sssd-tools" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="9a13345c635c350159afe3ed8d1e109d108d2a085fae939bd97f77ba185b9952" name="sssd-tools" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="f04086d2095d2de49314309a012ee1b8b2507943b3ea3f5cb6eaa48aa0d7baca" name="sssd-tools" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="f9f0a954c31fea83a77626f581f27c64cc23c892a9f11a3472e7af8b4d5db8b9" name="sssd-winbind-idmap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="d2586723e2549d5ffecf71a4e78e5c028a8e086b611725b8af8dba1915a1a184" name="sssd-winbind-idmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="46912183f85fb24b920c7267ddf2295ac906693f6d7fc517615c4306f63170f5" name="sssd-winbind-idmap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="e1eb419bae9364533508ff4927dc17bcc148272a843034c3751df77acd76217b" name="sssd-winbind-idmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="08d8f77e1a868db99eb23a7ed7820f5d8447e23be0b0b1e6e89603266ab424e6" name="sssd-winbind-idmap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="c467340c338bc1b01f077fb5e729d12d401c095af0bc0df28833e9fae0a0d583" name="sssd-winbind-idmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="0490a0944ebadc68e4b2ad633a997a8b0709d97fb3fae25c334a5273eacc5e43" name="sssd-winbind-idmap" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="6ce978f74086c8c1ca4e438dceb973342feddbb79cf6e6f4344b7a328da7a8c2" name="sssd-winbind-idmap" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="bc3869a62cbb89a1a9a512fcc12a28b5b4f2e609ce4a25902017c9310fb41659" name="subscription-manager" arch="i686">
  <version epoch="0" ver="1.19.23" rel="1.el7.centos"/>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.15-1" date="1495627200">- Sync zanata translations (khowell@redhat.com)
- 1452737: Enable saving no_proxy settings from GUI (jhnidek@redhat.com)
- 1451003: identity reports right info in name field (jhnidek@redhat.com)
- 1432231: Support /etc/init.d daemon even on EL7 (khowell@redhat.com)
- 1450818: Bug fix of com.redhat.Subscriptionmanager D-Bus policy
  (jhnidek@redhat.com)
- 1450862: remove obsolete certificates of golden ticket (jhnidek@redhat.com)
- 1450049: Replace `-` with `_` in completion functions (khowell@redhat.com)
- 1450210: Make lscpu ignore locale again (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.16-1" date="1495627201">- Bump python-rhsm requirement to 1.19.7 (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.17-1" date="1496145600">- Bump python-rhsm requirement to 1.19.8 (khowell@redhat.com)
- 1441397: Sync zanata translations (khowell@redhat.com)
- 1441397: Added --noproxy to bash completion script (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.18-1" date="1496836800">- Bump python-rhsm requirement to 1.19.9 (khowell@redhat.com)
- 1452075: print only readable part of SSL error to console
  (jhnidek@redhat.com)
- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)
- 1441397: added --noproxy for rhsm-debug auto-completion (jhnidek@redhat.com)
- 1365472: Add mnemonic for subscription-manager spoke (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.19-1" date="1496923200">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.20-1" date="1497268800">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.21-1" date="1498046400">- 1463765: Sync zanata translations (khowell@redhat.com)
- 1463765: Fix wrong Indic-language translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.22-1" date="1504094400">- 1486549: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)
- 1486326: Add subscription-manager plugin to yum-config-manager
  (khowell@redhat.com)
- 1486338: Properly initialize clean repo copy (khowell@redhat.com)
- 1484265: Force UTF-8 encoding in daemons (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.23-1" date="1504267200">- Bump python-rhsm requirement to 1.19.10 (khowell@redhat.com)
- 1481384: Improve error message for RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;1.19.23-1" date="1508414400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="ae2a14897ef52f01a88b789424cb6dca6802d5751be45dcd47bd5343a47466b2" name="subscription-manager" arch="src">
  <version epoch="0" ver="1.19.23" rel="1.el7.centos"/>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.15-1" date="1495627200">- Sync zanata translations (khowell@redhat.com)
- 1452737: Enable saving no_proxy settings from GUI (jhnidek@redhat.com)
- 1451003: identity reports right info in name field (jhnidek@redhat.com)
- 1432231: Support /etc/init.d daemon even on EL7 (khowell@redhat.com)
- 1450818: Bug fix of com.redhat.Subscriptionmanager D-Bus policy
  (jhnidek@redhat.com)
- 1450862: remove obsolete certificates of golden ticket (jhnidek@redhat.com)
- 1450049: Replace `-` with `_` in completion functions (khowell@redhat.com)
- 1450210: Make lscpu ignore locale again (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.16-1" date="1495627201">- Bump python-rhsm requirement to 1.19.7 (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.17-1" date="1496145600">- Bump python-rhsm requirement to 1.19.8 (khowell@redhat.com)
- 1441397: Sync zanata translations (khowell@redhat.com)
- 1441397: Added --noproxy to bash completion script (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.18-1" date="1496836800">- Bump python-rhsm requirement to 1.19.9 (khowell@redhat.com)
- 1452075: print only readable part of SSL error to console
  (jhnidek@redhat.com)
- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)
- 1441397: added --noproxy for rhsm-debug auto-completion (jhnidek@redhat.com)
- 1365472: Add mnemonic for subscription-manager spoke (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.19-1" date="1496923200">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.20-1" date="1497268800">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.21-1" date="1498046400">- 1463765: Sync zanata translations (khowell@redhat.com)
- 1463765: Fix wrong Indic-language translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.22-1" date="1504094400">- 1486549: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)
- 1486326: Add subscription-manager plugin to yum-config-manager
  (khowell@redhat.com)
- 1486338: Properly initialize clean repo copy (khowell@redhat.com)
- 1484265: Force UTF-8 encoding in daemons (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.23-1" date="1504267200">- Bump python-rhsm requirement to 1.19.10 (khowell@redhat.com)
- 1481384: Improve error message for RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;1.19.23-1" date="1508414400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="98cb10efb73560c9bcd11ee7fb8e225595998543b674f08687ae66b127fa46f5" name="subscription-manager" arch="src">
  <version epoch="0" ver="1.19.23" rel="1.el7.centos"/>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.15-1" date="1495627200">- Sync zanata translations (khowell@redhat.com)
- 1452737: Enable saving no_proxy settings from GUI (jhnidek@redhat.com)
- 1451003: identity reports right info in name field (jhnidek@redhat.com)
- 1432231: Support /etc/init.d daemon even on EL7 (khowell@redhat.com)
- 1450818: Bug fix of com.redhat.Subscriptionmanager D-Bus policy
  (jhnidek@redhat.com)
- 1450862: remove obsolete certificates of golden ticket (jhnidek@redhat.com)
- 1450049: Replace `-` with `_` in completion functions (khowell@redhat.com)
- 1450210: Make lscpu ignore locale again (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.16-1" date="1495627201">- Bump python-rhsm requirement to 1.19.7 (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.17-1" date="1496145600">- Bump python-rhsm requirement to 1.19.8 (khowell@redhat.com)
- 1441397: Sync zanata translations (khowell@redhat.com)
- 1441397: Added --noproxy to bash completion script (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.18-1" date="1496836800">- Bump python-rhsm requirement to 1.19.9 (khowell@redhat.com)
- 1452075: print only readable part of SSL error to console
  (jhnidek@redhat.com)
- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)
- 1441397: added --noproxy for rhsm-debug auto-completion (jhnidek@redhat.com)
- 1365472: Add mnemonic for subscription-manager spoke (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.19-1" date="1496923200">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.20-1" date="1497268800">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.21-1" date="1498046400">- 1463765: Sync zanata translations (khowell@redhat.com)
- 1463765: Fix wrong Indic-language translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.22-1" date="1504094400">- 1486549: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)
- 1486326: Add subscription-manager plugin to yum-config-manager
  (khowell@redhat.com)
- 1486338: Properly initialize clean repo copy (khowell@redhat.com)
- 1484265: Force UTF-8 encoding in daemons (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.23-1" date="1504267200">- Bump python-rhsm requirement to 1.19.10 (khowell@redhat.com)
- 1481384: Improve error message for RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;1.19.23-1" date="1508414400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="0fc2e4b4f70407fa759f38057f29d6ad86ea5904e6d691dc01ce8b97a1b2a3a2" name="subscription-manager" arch="x86_64">
  <version epoch="0" ver="1.19.23" rel="1.el7.centos"/>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.15-1" date="1495627200">- Sync zanata translations (khowell@redhat.com)
- 1452737: Enable saving no_proxy settings from GUI (jhnidek@redhat.com)
- 1451003: identity reports right info in name field (jhnidek@redhat.com)
- 1432231: Support /etc/init.d daemon even on EL7 (khowell@redhat.com)
- 1450818: Bug fix of com.redhat.Subscriptionmanager D-Bus policy
  (jhnidek@redhat.com)
- 1450862: remove obsolete certificates of golden ticket (jhnidek@redhat.com)
- 1450049: Replace `-` with `_` in completion functions (khowell@redhat.com)
- 1450210: Make lscpu ignore locale again (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.16-1" date="1495627201">- Bump python-rhsm requirement to 1.19.7 (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.17-1" date="1496145600">- Bump python-rhsm requirement to 1.19.8 (khowell@redhat.com)
- 1441397: Sync zanata translations (khowell@redhat.com)
- 1441397: Added --noproxy to bash completion script (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.18-1" date="1496836800">- Bump python-rhsm requirement to 1.19.9 (khowell@redhat.com)
- 1452075: print only readable part of SSL error to console
  (jhnidek@redhat.com)
- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)
- 1441397: added --noproxy for rhsm-debug auto-completion (jhnidek@redhat.com)
- 1365472: Add mnemonic for subscription-manager spoke (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.19-1" date="1496923200">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.20-1" date="1497268800">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.21-1" date="1498046400">- 1463765: Sync zanata translations (khowell@redhat.com)
- 1463765: Fix wrong Indic-language translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.22-1" date="1504094400">- 1486549: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)
- 1486326: Add subscription-manager plugin to yum-config-manager
  (khowell@redhat.com)
- 1486338: Properly initialize clean repo copy (khowell@redhat.com)
- 1484265: Force UTF-8 encoding in daemons (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.23-1" date="1504267200">- Bump python-rhsm requirement to 1.19.10 (khowell@redhat.com)
- 1481384: Improve error message for RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;1.19.23-1" date="1508414400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="ed2d96b57a4c43c1740ac0af968ebe414212636d2630c21ba78e3547af0e4c94" name="subscription-manager-debuginfo" arch="i686">
  <version epoch="0" ver="1.19.23" rel="1.el7.centos"/>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.15-1" date="1495627200">- Sync zanata translations (khowell@redhat.com)
- 1452737: Enable saving no_proxy settings from GUI (jhnidek@redhat.com)
- 1451003: identity reports right info in name field (jhnidek@redhat.com)
- 1432231: Support /etc/init.d daemon even on EL7 (khowell@redhat.com)
- 1450818: Bug fix of com.redhat.Subscriptionmanager D-Bus policy
  (jhnidek@redhat.com)
- 1450862: remove obsolete certificates of golden ticket (jhnidek@redhat.com)
- 1450049: Replace `-` with `_` in completion functions (khowell@redhat.com)
- 1450210: Make lscpu ignore locale again (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.16-1" date="1495627201">- Bump python-rhsm requirement to 1.19.7 (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.17-1" date="1496145600">- Bump python-rhsm requirement to 1.19.8 (khowell@redhat.com)
- 1441397: Sync zanata translations (khowell@redhat.com)
- 1441397: Added --noproxy to bash completion script (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.18-1" date="1496836800">- Bump python-rhsm requirement to 1.19.9 (khowell@redhat.com)
- 1452075: print only readable part of SSL error to console
  (jhnidek@redhat.com)
- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)
- 1441397: added --noproxy for rhsm-debug auto-completion (jhnidek@redhat.com)
- 1365472: Add mnemonic for subscription-manager spoke (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.19-1" date="1496923200">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.20-1" date="1497268800">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.21-1" date="1498046400">- 1463765: Sync zanata translations (khowell@redhat.com)
- 1463765: Fix wrong Indic-language translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.22-1" date="1504094400">- 1486549: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)
- 1486326: Add subscription-manager plugin to yum-config-manager
  (khowell@redhat.com)
- 1486338: Properly initialize clean repo copy (khowell@redhat.com)
- 1484265: Force UTF-8 encoding in daemons (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.23-1" date="1504267200">- Bump python-rhsm requirement to 1.19.10 (khowell@redhat.com)
- 1481384: Improve error message for RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;1.19.23-1" date="1508414400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="afa25bebc206eadd40f64ef9725dd84994759394b8a1e31c84176138dc16fa64" name="subscription-manager-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.19.23" rel="1.el7.centos"/>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.15-1" date="1495627200">- Sync zanata translations (khowell@redhat.com)
- 1452737: Enable saving no_proxy settings from GUI (jhnidek@redhat.com)
- 1451003: identity reports right info in name field (jhnidek@redhat.com)
- 1432231: Support /etc/init.d daemon even on EL7 (khowell@redhat.com)
- 1450818: Bug fix of com.redhat.Subscriptionmanager D-Bus policy
  (jhnidek@redhat.com)
- 1450862: remove obsolete certificates of golden ticket (jhnidek@redhat.com)
- 1450049: Replace `-` with `_` in completion functions (khowell@redhat.com)
- 1450210: Make lscpu ignore locale again (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.16-1" date="1495627201">- Bump python-rhsm requirement to 1.19.7 (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.17-1" date="1496145600">- Bump python-rhsm requirement to 1.19.8 (khowell@redhat.com)
- 1441397: Sync zanata translations (khowell@redhat.com)
- 1441397: Added --noproxy to bash completion script (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.18-1" date="1496836800">- Bump python-rhsm requirement to 1.19.9 (khowell@redhat.com)
- 1452075: print only readable part of SSL error to console
  (jhnidek@redhat.com)
- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)
- 1441397: added --noproxy for rhsm-debug auto-completion (jhnidek@redhat.com)
- 1365472: Add mnemonic for subscription-manager spoke (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.19-1" date="1496923200">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.20-1" date="1497268800">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.21-1" date="1498046400">- 1463765: Sync zanata translations (khowell@redhat.com)
- 1463765: Fix wrong Indic-language translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.22-1" date="1504094400">- 1486549: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)
- 1486326: Add subscription-manager plugin to yum-config-manager
  (khowell@redhat.com)
- 1486338: Properly initialize clean repo copy (khowell@redhat.com)
- 1484265: Force UTF-8 encoding in daemons (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.23-1" date="1504267200">- Bump python-rhsm requirement to 1.19.10 (khowell@redhat.com)
- 1481384: Improve error message for RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;1.19.23-1" date="1508414400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="cd9655517ef5fc30e8f36536546406a5f2d4edc5320d05188ee4dfd68cc98b57" name="subscription-manager-gui" arch="i686">
  <version epoch="0" ver="1.19.23" rel="1.el7.centos"/>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.15-1" date="1495627200">- Sync zanata translations (khowell@redhat.com)
- 1452737: Enable saving no_proxy settings from GUI (jhnidek@redhat.com)
- 1451003: identity reports right info in name field (jhnidek@redhat.com)
- 1432231: Support /etc/init.d daemon even on EL7 (khowell@redhat.com)
- 1450818: Bug fix of com.redhat.Subscriptionmanager D-Bus policy
  (jhnidek@redhat.com)
- 1450862: remove obsolete certificates of golden ticket (jhnidek@redhat.com)
- 1450049: Replace `-` with `_` in completion functions (khowell@redhat.com)
- 1450210: Make lscpu ignore locale again (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.16-1" date="1495627201">- Bump python-rhsm requirement to 1.19.7 (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.17-1" date="1496145600">- Bump python-rhsm requirement to 1.19.8 (khowell@redhat.com)
- 1441397: Sync zanata translations (khowell@redhat.com)
- 1441397: Added --noproxy to bash completion script (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.18-1" date="1496836800">- Bump python-rhsm requirement to 1.19.9 (khowell@redhat.com)
- 1452075: print only readable part of SSL error to console
  (jhnidek@redhat.com)
- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)
- 1441397: added --noproxy for rhsm-debug auto-completion (jhnidek@redhat.com)
- 1365472: Add mnemonic for subscription-manager spoke (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.19-1" date="1496923200">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.20-1" date="1497268800">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.21-1" date="1498046400">- 1463765: Sync zanata translations (khowell@redhat.com)
- 1463765: Fix wrong Indic-language translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.22-1" date="1504094400">- 1486549: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)
- 1486326: Add subscription-manager plugin to yum-config-manager
  (khowell@redhat.com)
- 1486338: Properly initialize clean repo copy (khowell@redhat.com)
- 1484265: Force UTF-8 encoding in daemons (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.23-1" date="1504267200">- Bump python-rhsm requirement to 1.19.10 (khowell@redhat.com)
- 1481384: Improve error message for RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;1.19.23-1" date="1508414400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="95e30c3c9607431feabb0e75d1b3fd38733f88fd500a05b7ddbc63b553a3204e" name="subscription-manager-gui" arch="x86_64">
  <version epoch="0" ver="1.19.23" rel="1.el7.centos"/>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.15-1" date="1495627200">- Sync zanata translations (khowell@redhat.com)
- 1452737: Enable saving no_proxy settings from GUI (jhnidek@redhat.com)
- 1451003: identity reports right info in name field (jhnidek@redhat.com)
- 1432231: Support /etc/init.d daemon even on EL7 (khowell@redhat.com)
- 1450818: Bug fix of com.redhat.Subscriptionmanager D-Bus policy
  (jhnidek@redhat.com)
- 1450862: remove obsolete certificates of golden ticket (jhnidek@redhat.com)
- 1450049: Replace `-` with `_` in completion functions (khowell@redhat.com)
- 1450210: Make lscpu ignore locale again (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.16-1" date="1495627201">- Bump python-rhsm requirement to 1.19.7 (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.17-1" date="1496145600">- Bump python-rhsm requirement to 1.19.8 (khowell@redhat.com)
- 1441397: Sync zanata translations (khowell@redhat.com)
- 1441397: Added --noproxy to bash completion script (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.18-1" date="1496836800">- Bump python-rhsm requirement to 1.19.9 (khowell@redhat.com)
- 1452075: print only readable part of SSL error to console
  (jhnidek@redhat.com)
- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)
- 1441397: added --noproxy for rhsm-debug auto-completion (jhnidek@redhat.com)
- 1365472: Add mnemonic for subscription-manager spoke (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.19-1" date="1496923200">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.20-1" date="1497268800">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.21-1" date="1498046400">- 1463765: Sync zanata translations (khowell@redhat.com)
- 1463765: Fix wrong Indic-language translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.22-1" date="1504094400">- 1486549: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)
- 1486326: Add subscription-manager plugin to yum-config-manager
  (khowell@redhat.com)
- 1486338: Properly initialize clean repo copy (khowell@redhat.com)
- 1484265: Force UTF-8 encoding in daemons (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.23-1" date="1504267200">- Bump python-rhsm requirement to 1.19.10 (khowell@redhat.com)
- 1481384: Improve error message for RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;1.19.23-1" date="1508414400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="4b74d141f5d2fc903327871bfd91b127195dcd1e63153a3caa19387caf82e9a5" name="subscription-manager-initial-setup-addon" arch="i686">
  <version epoch="0" ver="1.19.23" rel="1.el7.centos"/>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.15-1" date="1495627200">- Sync zanata translations (khowell@redhat.com)
- 1452737: Enable saving no_proxy settings from GUI (jhnidek@redhat.com)
- 1451003: identity reports right info in name field (jhnidek@redhat.com)
- 1432231: Support /etc/init.d daemon even on EL7 (khowell@redhat.com)
- 1450818: Bug fix of com.redhat.Subscriptionmanager D-Bus policy
  (jhnidek@redhat.com)
- 1450862: remove obsolete certificates of golden ticket (jhnidek@redhat.com)
- 1450049: Replace `-` with `_` in completion functions (khowell@redhat.com)
- 1450210: Make lscpu ignore locale again (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.16-1" date="1495627201">- Bump python-rhsm requirement to 1.19.7 (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.17-1" date="1496145600">- Bump python-rhsm requirement to 1.19.8 (khowell@redhat.com)
- 1441397: Sync zanata translations (khowell@redhat.com)
- 1441397: Added --noproxy to bash completion script (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.18-1" date="1496836800">- Bump python-rhsm requirement to 1.19.9 (khowell@redhat.com)
- 1452075: print only readable part of SSL error to console
  (jhnidek@redhat.com)
- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)
- 1441397: added --noproxy for rhsm-debug auto-completion (jhnidek@redhat.com)
- 1365472: Add mnemonic for subscription-manager spoke (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.19-1" date="1496923200">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.20-1" date="1497268800">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.21-1" date="1498046400">- 1463765: Sync zanata translations (khowell@redhat.com)
- 1463765: Fix wrong Indic-language translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.22-1" date="1504094400">- 1486549: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)
- 1486326: Add subscription-manager plugin to yum-config-manager
  (khowell@redhat.com)
- 1486338: Properly initialize clean repo copy (khowell@redhat.com)
- 1484265: Force UTF-8 encoding in daemons (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.23-1" date="1504267200">- Bump python-rhsm requirement to 1.19.10 (khowell@redhat.com)
- 1481384: Improve error message for RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;1.19.23-1" date="1508414400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="9d339f4bc52943a28107eae59dea95120a2b3536a007802f871b08afe92eb972" name="subscription-manager-initial-setup-addon" arch="x86_64">
  <version epoch="0" ver="1.19.23" rel="1.el7.centos"/>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.15-1" date="1495627200">- Sync zanata translations (khowell@redhat.com)
- 1452737: Enable saving no_proxy settings from GUI (jhnidek@redhat.com)
- 1451003: identity reports right info in name field (jhnidek@redhat.com)
- 1432231: Support /etc/init.d daemon even on EL7 (khowell@redhat.com)
- 1450818: Bug fix of com.redhat.Subscriptionmanager D-Bus policy
  (jhnidek@redhat.com)
- 1450862: remove obsolete certificates of golden ticket (jhnidek@redhat.com)
- 1450049: Replace `-` with `_` in completion functions (khowell@redhat.com)
- 1450210: Make lscpu ignore locale again (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.16-1" date="1495627201">- Bump python-rhsm requirement to 1.19.7 (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.17-1" date="1496145600">- Bump python-rhsm requirement to 1.19.8 (khowell@redhat.com)
- 1441397: Sync zanata translations (khowell@redhat.com)
- 1441397: Added --noproxy to bash completion script (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.18-1" date="1496836800">- Bump python-rhsm requirement to 1.19.9 (khowell@redhat.com)
- 1452075: print only readable part of SSL error to console
  (jhnidek@redhat.com)
- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)
- 1441397: added --noproxy for rhsm-debug auto-completion (jhnidek@redhat.com)
- 1365472: Add mnemonic for subscription-manager spoke (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.19-1" date="1496923200">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.20-1" date="1497268800">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.21-1" date="1498046400">- 1463765: Sync zanata translations (khowell@redhat.com)
- 1463765: Fix wrong Indic-language translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.22-1" date="1504094400">- 1486549: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)
- 1486326: Add subscription-manager plugin to yum-config-manager
  (khowell@redhat.com)
- 1486338: Properly initialize clean repo copy (khowell@redhat.com)
- 1484265: Force UTF-8 encoding in daemons (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.23-1" date="1504267200">- Bump python-rhsm requirement to 1.19.10 (khowell@redhat.com)
- 1481384: Improve error message for RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;1.19.23-1" date="1508414400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="ee13963f3d6e63879bbc177de983dc7efe33f9926d7ddddb582897581df77581" name="subscription-manager-migration" arch="i686">
  <version epoch="0" ver="1.19.23" rel="1.el7.centos"/>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.15-1" date="1495627200">- Sync zanata translations (khowell@redhat.com)
- 1452737: Enable saving no_proxy settings from GUI (jhnidek@redhat.com)
- 1451003: identity reports right info in name field (jhnidek@redhat.com)
- 1432231: Support /etc/init.d daemon even on EL7 (khowell@redhat.com)
- 1450818: Bug fix of com.redhat.Subscriptionmanager D-Bus policy
  (jhnidek@redhat.com)
- 1450862: remove obsolete certificates of golden ticket (jhnidek@redhat.com)
- 1450049: Replace `-` with `_` in completion functions (khowell@redhat.com)
- 1450210: Make lscpu ignore locale again (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.16-1" date="1495627201">- Bump python-rhsm requirement to 1.19.7 (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.17-1" date="1496145600">- Bump python-rhsm requirement to 1.19.8 (khowell@redhat.com)
- 1441397: Sync zanata translations (khowell@redhat.com)
- 1441397: Added --noproxy to bash completion script (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.18-1" date="1496836800">- Bump python-rhsm requirement to 1.19.9 (khowell@redhat.com)
- 1452075: print only readable part of SSL error to console
  (jhnidek@redhat.com)
- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)
- 1441397: added --noproxy for rhsm-debug auto-completion (jhnidek@redhat.com)
- 1365472: Add mnemonic for subscription-manager spoke (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.19-1" date="1496923200">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.20-1" date="1497268800">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.21-1" date="1498046400">- 1463765: Sync zanata translations (khowell@redhat.com)
- 1463765: Fix wrong Indic-language translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.22-1" date="1504094400">- 1486549: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)
- 1486326: Add subscription-manager plugin to yum-config-manager
  (khowell@redhat.com)
- 1486338: Properly initialize clean repo copy (khowell@redhat.com)
- 1484265: Force UTF-8 encoding in daemons (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.23-1" date="1504267200">- Bump python-rhsm requirement to 1.19.10 (khowell@redhat.com)
- 1481384: Improve error message for RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;1.19.23-1" date="1508414400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="7d723399c2f209d052b15aea703a92e97bb57ca276b30acbd5769d0995cf4339" name="subscription-manager-migration" arch="x86_64">
  <version epoch="0" ver="1.19.23" rel="1.el7.centos"/>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.15-1" date="1495627200">- Sync zanata translations (khowell@redhat.com)
- 1452737: Enable saving no_proxy settings from GUI (jhnidek@redhat.com)
- 1451003: identity reports right info in name field (jhnidek@redhat.com)
- 1432231: Support /etc/init.d daemon even on EL7 (khowell@redhat.com)
- 1450818: Bug fix of com.redhat.Subscriptionmanager D-Bus policy
  (jhnidek@redhat.com)
- 1450862: remove obsolete certificates of golden ticket (jhnidek@redhat.com)
- 1450049: Replace `-` with `_` in completion functions (khowell@redhat.com)
- 1450210: Make lscpu ignore locale again (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.16-1" date="1495627201">- Bump python-rhsm requirement to 1.19.7 (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.17-1" date="1496145600">- Bump python-rhsm requirement to 1.19.8 (khowell@redhat.com)
- 1441397: Sync zanata translations (khowell@redhat.com)
- 1441397: Added --noproxy to bash completion script (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.18-1" date="1496836800">- Bump python-rhsm requirement to 1.19.9 (khowell@redhat.com)
- 1452075: print only readable part of SSL error to console
  (jhnidek@redhat.com)
- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)
- 1441397: added --noproxy for rhsm-debug auto-completion (jhnidek@redhat.com)
- 1365472: Add mnemonic for subscription-manager spoke (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.19-1" date="1496923200">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.20-1" date="1497268800">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.21-1" date="1498046400">- 1463765: Sync zanata translations (khowell@redhat.com)
- 1463765: Fix wrong Indic-language translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.22-1" date="1504094400">- 1486549: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)
- 1486326: Add subscription-manager plugin to yum-config-manager
  (khowell@redhat.com)
- 1486338: Properly initialize clean repo copy (khowell@redhat.com)
- 1484265: Force UTF-8 encoding in daemons (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.23-1" date="1504267200">- Bump python-rhsm requirement to 1.19.10 (khowell@redhat.com)
- 1481384: Improve error message for RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;1.19.23-1" date="1508414400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="810417046234b6f66e35eea2d86552e46bc00db7af4f2c14c0d17ad12113dc5d" name="subscription-manager-plugin-container" arch="i686">
  <version epoch="0" ver="1.19.23" rel="1.el7.centos"/>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.15-1" date="1495627200">- Sync zanata translations (khowell@redhat.com)
- 1452737: Enable saving no_proxy settings from GUI (jhnidek@redhat.com)
- 1451003: identity reports right info in name field (jhnidek@redhat.com)
- 1432231: Support /etc/init.d daemon even on EL7 (khowell@redhat.com)
- 1450818: Bug fix of com.redhat.Subscriptionmanager D-Bus policy
  (jhnidek@redhat.com)
- 1450862: remove obsolete certificates of golden ticket (jhnidek@redhat.com)
- 1450049: Replace `-` with `_` in completion functions (khowell@redhat.com)
- 1450210: Make lscpu ignore locale again (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.16-1" date="1495627201">- Bump python-rhsm requirement to 1.19.7 (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.17-1" date="1496145600">- Bump python-rhsm requirement to 1.19.8 (khowell@redhat.com)
- 1441397: Sync zanata translations (khowell@redhat.com)
- 1441397: Added --noproxy to bash completion script (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.18-1" date="1496836800">- Bump python-rhsm requirement to 1.19.9 (khowell@redhat.com)
- 1452075: print only readable part of SSL error to console
  (jhnidek@redhat.com)
- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)
- 1441397: added --noproxy for rhsm-debug auto-completion (jhnidek@redhat.com)
- 1365472: Add mnemonic for subscription-manager spoke (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.19-1" date="1496923200">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.20-1" date="1497268800">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.21-1" date="1498046400">- 1463765: Sync zanata translations (khowell@redhat.com)
- 1463765: Fix wrong Indic-language translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.22-1" date="1504094400">- 1486549: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)
- 1486326: Add subscription-manager plugin to yum-config-manager
  (khowell@redhat.com)
- 1486338: Properly initialize clean repo copy (khowell@redhat.com)
- 1484265: Force UTF-8 encoding in daemons (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.23-1" date="1504267200">- Bump python-rhsm requirement to 1.19.10 (khowell@redhat.com)
- 1481384: Improve error message for RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;1.19.23-1" date="1508414400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="aea4ed8461a6f9ee0d3cbdc4c89a967caff9193ecb4ad5f6c6be970b0d01b1a5" name="subscription-manager-plugin-container" arch="x86_64">
  <version epoch="0" ver="1.19.23" rel="1.el7.centos"/>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.15-1" date="1495627200">- Sync zanata translations (khowell@redhat.com)
- 1452737: Enable saving no_proxy settings from GUI (jhnidek@redhat.com)
- 1451003: identity reports right info in name field (jhnidek@redhat.com)
- 1432231: Support /etc/init.d daemon even on EL7 (khowell@redhat.com)
- 1450818: Bug fix of com.redhat.Subscriptionmanager D-Bus policy
  (jhnidek@redhat.com)
- 1450862: remove obsolete certificates of golden ticket (jhnidek@redhat.com)
- 1450049: Replace `-` with `_` in completion functions (khowell@redhat.com)
- 1450210: Make lscpu ignore locale again (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.16-1" date="1495627201">- Bump python-rhsm requirement to 1.19.7 (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.17-1" date="1496145600">- Bump python-rhsm requirement to 1.19.8 (khowell@redhat.com)
- 1441397: Sync zanata translations (khowell@redhat.com)
- 1441397: Added --noproxy to bash completion script (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.18-1" date="1496836800">- Bump python-rhsm requirement to 1.19.9 (khowell@redhat.com)
- 1452075: print only readable part of SSL error to console
  (jhnidek@redhat.com)
- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)
- 1441397: added --noproxy for rhsm-debug auto-completion (jhnidek@redhat.com)
- 1365472: Add mnemonic for subscription-manager spoke (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.19-1" date="1496923200">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.20-1" date="1497268800">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.21-1" date="1498046400">- 1463765: Sync zanata translations (khowell@redhat.com)
- 1463765: Fix wrong Indic-language translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.22-1" date="1504094400">- 1486549: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)
- 1486326: Add subscription-manager plugin to yum-config-manager
  (khowell@redhat.com)
- 1486338: Properly initialize clean repo copy (khowell@redhat.com)
- 1484265: Force UTF-8 encoding in daemons (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.23-1" date="1504267200">- Bump python-rhsm requirement to 1.19.10 (khowell@redhat.com)
- 1481384: Improve error message for RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;1.19.23-1" date="1508414400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="2ab96889f3cd1311b6e3ef9fb164367941f325389b6c760971c5760fd74f953b" name="subscription-manager-plugin-ostree" arch="i686">
  <version epoch="0" ver="1.19.23" rel="1.el7.centos"/>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.15-1" date="1495627200">- Sync zanata translations (khowell@redhat.com)
- 1452737: Enable saving no_proxy settings from GUI (jhnidek@redhat.com)
- 1451003: identity reports right info in name field (jhnidek@redhat.com)
- 1432231: Support /etc/init.d daemon even on EL7 (khowell@redhat.com)
- 1450818: Bug fix of com.redhat.Subscriptionmanager D-Bus policy
  (jhnidek@redhat.com)
- 1450862: remove obsolete certificates of golden ticket (jhnidek@redhat.com)
- 1450049: Replace `-` with `_` in completion functions (khowell@redhat.com)
- 1450210: Make lscpu ignore locale again (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.16-1" date="1495627201">- Bump python-rhsm requirement to 1.19.7 (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.17-1" date="1496145600">- Bump python-rhsm requirement to 1.19.8 (khowell@redhat.com)
- 1441397: Sync zanata translations (khowell@redhat.com)
- 1441397: Added --noproxy to bash completion script (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.18-1" date="1496836800">- Bump python-rhsm requirement to 1.19.9 (khowell@redhat.com)
- 1452075: print only readable part of SSL error to console
  (jhnidek@redhat.com)
- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)
- 1441397: added --noproxy for rhsm-debug auto-completion (jhnidek@redhat.com)
- 1365472: Add mnemonic for subscription-manager spoke (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.19-1" date="1496923200">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.20-1" date="1497268800">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.21-1" date="1498046400">- 1463765: Sync zanata translations (khowell@redhat.com)
- 1463765: Fix wrong Indic-language translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.22-1" date="1504094400">- 1486549: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)
- 1486326: Add subscription-manager plugin to yum-config-manager
  (khowell@redhat.com)
- 1486338: Properly initialize clean repo copy (khowell@redhat.com)
- 1484265: Force UTF-8 encoding in daemons (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.23-1" date="1504267200">- Bump python-rhsm requirement to 1.19.10 (khowell@redhat.com)
- 1481384: Improve error message for RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;1.19.23-1" date="1508414400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="47aa21a8d0bea2087699e939e6c034579e839efd02b74160ac93dcbe2fe3172a" name="subscription-manager-plugin-ostree" arch="x86_64">
  <version epoch="0" ver="1.19.23" rel="1.el7.centos"/>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.15-1" date="1495627200">- Sync zanata translations (khowell@redhat.com)
- 1452737: Enable saving no_proxy settings from GUI (jhnidek@redhat.com)
- 1451003: identity reports right info in name field (jhnidek@redhat.com)
- 1432231: Support /etc/init.d daemon even on EL7 (khowell@redhat.com)
- 1450818: Bug fix of com.redhat.Subscriptionmanager D-Bus policy
  (jhnidek@redhat.com)
- 1450862: remove obsolete certificates of golden ticket (jhnidek@redhat.com)
- 1450049: Replace `-` with `_` in completion functions (khowell@redhat.com)
- 1450210: Make lscpu ignore locale again (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.16-1" date="1495627201">- Bump python-rhsm requirement to 1.19.7 (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.17-1" date="1496145600">- Bump python-rhsm requirement to 1.19.8 (khowell@redhat.com)
- 1441397: Sync zanata translations (khowell@redhat.com)
- 1441397: Added --noproxy to bash completion script (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.18-1" date="1496836800">- Bump python-rhsm requirement to 1.19.9 (khowell@redhat.com)
- 1452075: print only readable part of SSL error to console
  (jhnidek@redhat.com)
- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)
- 1441397: added --noproxy for rhsm-debug auto-completion (jhnidek@redhat.com)
- 1365472: Add mnemonic for subscription-manager spoke (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.19-1" date="1496923200">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.20-1" date="1497268800">- 1441739: Sync zanata translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.21-1" date="1498046400">- 1463765: Sync zanata translations (khowell@redhat.com)
- 1463765: Fix wrong Indic-language translations (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.22-1" date="1504094400">- 1486549: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)
- 1486326: Add subscription-manager plugin to yum-config-manager
  (khowell@redhat.com)
- 1486338: Properly initialize clean repo copy (khowell@redhat.com)
- 1484265: Force UTF-8 encoding in daemons (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.23-1" date="1504267200">- Bump python-rhsm requirement to 1.19.10 (khowell@redhat.com)
- 1481384: Improve error message for RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;1.19.23-1" date="1508414400">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="63b01deeb1912ef1631e2f64f09197095c565569af893a446614232fa24439b5" name="subversion" arch="i686">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="f4e61f7a9d98849842f210cf279440bdf1b4203461f80bdd669f0798ed46945f" name="subversion" arch="src">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="023744d9a23a1f8dd35dc7a7333f700a4fb70b3e5792d6c1b706ce58e8a995ac" name="subversion" arch="src">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="d0e7c7eae850817e228b757881be9f6f5a3e1b6e5ede252a3f769428259fe562" name="subversion" arch="x86_64">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="0b0d1fd739ca02935da671a17a96a72db6549dedd4839a2bda9475ef542265a5" name="subversion-debuginfo" arch="i686">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="67d977f7dc9ebe3d6871bfba166d3562a64950855fea2db7b1ed528fdb8e3763" name="subversion-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="b0a27789b3eb7440837b84c2c75c32f7750574467634d114e285f389c248ed5f" name="subversion-devel" arch="i686">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="2d7529483d23cb9dc696d75aee8acf3039ccc8dd8853c581292be223df3aeb0e" name="subversion-devel" arch="x86_64">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="7118d9bc02a8180c008846fdf76aa9d4ac0c67c0e3bfbc3d9d8e140e62712959" name="subversion-gnome" arch="i686">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="f26087b51c5a2614d539f305add0a5a17e142d603243769588e38d69ef2ac180" name="subversion-gnome" arch="x86_64">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="6f50890bf6e0f9e9c467e9fdef75d82b42198227ee8735ef7295f9f7a59719cc" name="subversion-javahl" arch="i686">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="24c58f038ccc6a123ac5f64f9a362b873fedf5ae54611cd26079d54b67ab2eb5" name="subversion-javahl" arch="x86_64">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="52f3dba903a8152aac0c0d88e35f56123742f0d4ec99f3d09a66d2445b3203ad" name="subversion-kde" arch="i686">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="5bb8735f3a541184f4fe40bf87a60616fbf0155a8723840c8324263a454cef49" name="subversion-kde" arch="x86_64">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="f8d590dea1d04a5925dfc70222b38d7d22aaf32d986461274186b0d6822e3ce9" name="subversion-libs" arch="i686">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="1c6fe8408f0b46f521902f8194ce3c0dc02e83acede76673612e04057b75aeeb" name="subversion-libs" arch="x86_64">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="1002797415257e9c7c05be05ee6e5ca05fc122e979f5306abd1d19850e89a295" name="subversion-perl" arch="i686">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="84fd8479c4d0e4bd43311c5130f4ab21c94124d1b77c5bc0aa0eb988ed1590f8" name="subversion-perl" arch="x86_64">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="62fa5c524756292659aa707227df90655d4464546d2e847b93c35d586716c1a3" name="subversion-python" arch="i686">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="41d65bb63b52f2d17ac0450f1fe16f126054c3a573566b3b577e8676260b1a01" name="subversion-python" arch="x86_64">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="be1f0a9e8004e23c9aecc291684ce834f33c3cc90132d92786a88a0adf2dc95d" name="subversion-ruby" arch="i686">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="fa3df2c023192cdab76c5c22a5e73201c3742c60ffb45d230033baebff871c85" name="subversion-ruby" arch="x86_64">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="a9f8ca5bbfb8ca0511157e3be476df7095835ad7e3e2fdea436462231bae74a8" name="subversion-tools" arch="i686">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="2a5a5a8389f6fdc214f83a4ea11e8244de000e8a1eebcc27e2b5648b7e535f52" name="subversion-tools" arch="x86_64">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="203d2113a82c183bb0ae04cd4420113ae8dd5bde4c1d7f410141671d1271843a" name="sudo" arch="i686">
  <version epoch="0" ver="1.8.19p2" rel="11.el7_4"/>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-2" date="1488974400">- RHEL 7.4 erratum
- Fixes coverity scan issues created by our patches: 
  - fixed resource leaks and a compiler warning in digest backport patch
  - removed needless code from cmnd_no_wait patch causing clang warning
  - format of the last changelog message causes problems to rhpkg push,
    so don't use that as a commit message 
  Resolves: rhbz#1360687</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-3" date="1488974401">- RHEL 7.4 eratum
- Fixes semicolon typo in digest backport patch from the previous build
  Resolves: rhbz#1360687</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-4" date="1490097600">- RHEL 7.4 erratum
- fixed cmnd_no_wait patch
- backported iolog_flush sudoers default
  Resolves: rhbz#1369856
  Resolves: rhbz#1425853</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-5" date="1493121600">- RHEL 7.4 erratum
- added doc patch about sudo lookup issue
  Resolves: rhbz#1293306
- added test suite patch
  Resolves: rhbz#1360687
- fixed use after free fqdn problem
  Resolves: rhbz#1360687</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-6" date="1493899200">- RHEL 7.4 erratum
- added patch that fixes lecture option used as bolean
  Resolves rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-7" date="1495540800">- RHEL 7.4 erratum
- added patch to fix output truncation (in some cases) when log_output
  option is enabled
  Resolves: rhbz#1454571</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.19p2-8" date="1495713600">- RHEL 7.4 erratum
- Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
  Resolves: rhbz#1455402</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1503057600">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1482929</changelog>
</package>
<package pkgid="7eae9603d7680ebe6b95fc8275a1448cd0a97108f1a548d2cf4de7834178a226" name="sudo" arch="src">
  <version epoch="0" ver="1.8.19p2" rel="11.el7_4"/>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-2" date="1488974400">- RHEL 7.4 erratum
- Fixes coverity scan issues created by our patches: 
  - fixed resource leaks and a compiler warning in digest backport patch
  - removed needless code from cmnd_no_wait patch causing clang warning
  - format of the last changelog message causes problems to rhpkg push,
    so don't use that as a commit message 
  Resolves: rhbz#1360687</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-3" date="1488974401">- RHEL 7.4 eratum
- Fixes semicolon typo in digest backport patch from the previous build
  Resolves: rhbz#1360687</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-4" date="1490097600">- RHEL 7.4 erratum
- fixed cmnd_no_wait patch
- backported iolog_flush sudoers default
  Resolves: rhbz#1369856
  Resolves: rhbz#1425853</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-5" date="1493121600">- RHEL 7.4 erratum
- added doc patch about sudo lookup issue
  Resolves: rhbz#1293306
- added test suite patch
  Resolves: rhbz#1360687
- fixed use after free fqdn problem
  Resolves: rhbz#1360687</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-6" date="1493899200">- RHEL 7.4 erratum
- added patch that fixes lecture option used as bolean
  Resolves rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-7" date="1495540800">- RHEL 7.4 erratum
- added patch to fix output truncation (in some cases) when log_output
  option is enabled
  Resolves: rhbz#1454571</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.19p2-8" date="1495713600">- RHEL 7.4 erratum
- Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
  Resolves: rhbz#1455402</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1503057600">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1482929</changelog>
</package>
<package pkgid="3126453bf7f9cc3d8b058494e14f0a29cfe42a39d5006a81f7c7803d8b50278c" name="sudo" arch="src">
  <version epoch="0" ver="1.8.19p2" rel="11.el7_4"/>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-2" date="1488974400">- RHEL 7.4 erratum
- Fixes coverity scan issues created by our patches: 
  - fixed resource leaks and a compiler warning in digest backport patch
  - removed needless code from cmnd_no_wait patch causing clang warning
  - format of the last changelog message causes problems to rhpkg push,
    so don't use that as a commit message 
  Resolves: rhbz#1360687</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-3" date="1488974401">- RHEL 7.4 eratum
- Fixes semicolon typo in digest backport patch from the previous build
  Resolves: rhbz#1360687</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-4" date="1490097600">- RHEL 7.4 erratum
- fixed cmnd_no_wait patch
- backported iolog_flush sudoers default
  Resolves: rhbz#1369856
  Resolves: rhbz#1425853</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-5" date="1493121600">- RHEL 7.4 erratum
- added doc patch about sudo lookup issue
  Resolves: rhbz#1293306
- added test suite patch
  Resolves: rhbz#1360687
- fixed use after free fqdn problem
  Resolves: rhbz#1360687</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-6" date="1493899200">- RHEL 7.4 erratum
- added patch that fixes lecture option used as bolean
  Resolves rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-7" date="1495540800">- RHEL 7.4 erratum
- added patch to fix output truncation (in some cases) when log_output
  option is enabled
  Resolves: rhbz#1454571</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.19p2-8" date="1495713600">- RHEL 7.4 erratum
- Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
  Resolves: rhbz#1455402</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1503057600">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1482929</changelog>
</package>
<package pkgid="027ff6e2965f6cbc3dcef770796e799efc371b462257886a849f14cd1d849f91" name="sudo" arch="x86_64">
  <version epoch="0" ver="1.8.19p2" rel="11.el7_4"/>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-2" date="1488974400">- RHEL 7.4 erratum
- Fixes coverity scan issues created by our patches: 
  - fixed resource leaks and a compiler warning in digest backport patch
  - removed needless code from cmnd_no_wait patch causing clang warning
  - format of the last changelog message causes problems to rhpkg push,
    so don't use that as a commit message 
  Resolves: rhbz#1360687</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-3" date="1488974401">- RHEL 7.4 eratum
- Fixes semicolon typo in digest backport patch from the previous build
  Resolves: rhbz#1360687</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-4" date="1490097600">- RHEL 7.4 erratum
- fixed cmnd_no_wait patch
- backported iolog_flush sudoers default
  Resolves: rhbz#1369856
  Resolves: rhbz#1425853</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-5" date="1493121600">- RHEL 7.4 erratum
- added doc patch about sudo lookup issue
  Resolves: rhbz#1293306
- added test suite patch
  Resolves: rhbz#1360687
- fixed use after free fqdn problem
  Resolves: rhbz#1360687</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-6" date="1493899200">- RHEL 7.4 erratum
- added patch that fixes lecture option used as bolean
  Resolves rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-7" date="1495540800">- RHEL 7.4 erratum
- added patch to fix output truncation (in some cases) when log_output
  option is enabled
  Resolves: rhbz#1454571</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.19p2-8" date="1495713600">- RHEL 7.4 erratum
- Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
  Resolves: rhbz#1455402</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1503057600">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1482929</changelog>
</package>
<package pkgid="25cddb5ea260a8a60d8d637519f27d7176e7a7bb9b1e4f1a8bd8bf697bae49bd" name="sudo-debuginfo" arch="i686">
  <version epoch="0" ver="1.8.19p2" rel="11.el7_4"/>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-2" date="1488974400">- RHEL 7.4 erratum
- Fixes coverity scan issues created by our patches: 
  - fixed resource leaks and a compiler warning in digest backport patch
  - removed needless code from cmnd_no_wait patch causing clang warning
  - format of the last changelog message causes problems to rhpkg push,
    so don't use that as a commit message 
  Resolves: rhbz#1360687</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-3" date="1488974401">- RHEL 7.4 eratum
- Fixes semicolon typo in digest backport patch from the previous build
  Resolves: rhbz#1360687</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-4" date="1490097600">- RHEL 7.4 erratum
- fixed cmnd_no_wait patch
- backported iolog_flush sudoers default
  Resolves: rhbz#1369856
  Resolves: rhbz#1425853</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-5" date="1493121600">- RHEL 7.4 erratum
- added doc patch about sudo lookup issue
  Resolves: rhbz#1293306
- added test suite patch
  Resolves: rhbz#1360687
- fixed use after free fqdn problem
  Resolves: rhbz#1360687</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-6" date="1493899200">- RHEL 7.4 erratum
- added patch that fixes lecture option used as bolean
  Resolves rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-7" date="1495540800">- RHEL 7.4 erratum
- added patch to fix output truncation (in some cases) when log_output
  option is enabled
  Resolves: rhbz#1454571</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.19p2-8" date="1495713600">- RHEL 7.4 erratum
- Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
  Resolves: rhbz#1455402</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1503057600">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1482929</changelog>
</package>
<package pkgid="95f57b0fd1343e03e79046d9dc5612d4af951b5f0cb2ed261e0f622cc0747b8c" name="sudo-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.19p2" rel="11.el7_4"/>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-2" date="1488974400">- RHEL 7.4 erratum
- Fixes coverity scan issues created by our patches: 
  - fixed resource leaks and a compiler warning in digest backport patch
  - removed needless code from cmnd_no_wait patch causing clang warning
  - format of the last changelog message causes problems to rhpkg push,
    so don't use that as a commit message 
  Resolves: rhbz#1360687</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-3" date="1488974401">- RHEL 7.4 eratum
- Fixes semicolon typo in digest backport patch from the previous build
  Resolves: rhbz#1360687</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-4" date="1490097600">- RHEL 7.4 erratum
- fixed cmnd_no_wait patch
- backported iolog_flush sudoers default
  Resolves: rhbz#1369856
  Resolves: rhbz#1425853</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-5" date="1493121600">- RHEL 7.4 erratum
- added doc patch about sudo lookup issue
  Resolves: rhbz#1293306
- added test suite patch
  Resolves: rhbz#1360687
- fixed use after free fqdn problem
  Resolves: rhbz#1360687</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-6" date="1493899200">- RHEL 7.4 erratum
- added patch that fixes lecture option used as bolean
  Resolves rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-7" date="1495540800">- RHEL 7.4 erratum
- added patch to fix output truncation (in some cases) when log_output
  option is enabled
  Resolves: rhbz#1454571</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.19p2-8" date="1495713600">- RHEL 7.4 erratum
- Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
  Resolves: rhbz#1455402</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1503057600">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1482929</changelog>
</package>
<package pkgid="064c5e9c490863439c81500e645eeb6eae7de8b8d30ef94e72b08ecad4d8762e" name="sudo-devel" arch="i686">
  <version epoch="0" ver="1.8.19p2" rel="11.el7_4"/>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-2" date="1488974400">- RHEL 7.4 erratum
- Fixes coverity scan issues created by our patches: 
  - fixed resource leaks and a compiler warning in digest backport patch
  - removed needless code from cmnd_no_wait patch causing clang warning
  - format of the last changelog message causes problems to rhpkg push,
    so don't use that as a commit message 
  Resolves: rhbz#1360687</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-3" date="1488974401">- RHEL 7.4 eratum
- Fixes semicolon typo in digest backport patch from the previous build
  Resolves: rhbz#1360687</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-4" date="1490097600">- RHEL 7.4 erratum
- fixed cmnd_no_wait patch
- backported iolog_flush sudoers default
  Resolves: rhbz#1369856
  Resolves: rhbz#1425853</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-5" date="1493121600">- RHEL 7.4 erratum
- added doc patch about sudo lookup issue
  Resolves: rhbz#1293306
- added test suite patch
  Resolves: rhbz#1360687
- fixed use after free fqdn problem
  Resolves: rhbz#1360687</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-6" date="1493899200">- RHEL 7.4 erratum
- added patch that fixes lecture option used as bolean
  Resolves rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-7" date="1495540800">- RHEL 7.4 erratum
- added patch to fix output truncation (in some cases) when log_output
  option is enabled
  Resolves: rhbz#1454571</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.19p2-8" date="1495713600">- RHEL 7.4 erratum
- Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
  Resolves: rhbz#1455402</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1503057600">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1482929</changelog>
</package>
<package pkgid="341fec2faf7e07a55b05d06cfb44d906ac03f91240593c0d98432c681ca4d766" name="sudo-devel" arch="x86_64">
  <version epoch="0" ver="1.8.19p2" rel="11.el7_4"/>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-2" date="1488974400">- RHEL 7.4 erratum
- Fixes coverity scan issues created by our patches: 
  - fixed resource leaks and a compiler warning in digest backport patch
  - removed needless code from cmnd_no_wait patch causing clang warning
  - format of the last changelog message causes problems to rhpkg push,
    so don't use that as a commit message 
  Resolves: rhbz#1360687</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-3" date="1488974401">- RHEL 7.4 eratum
- Fixes semicolon typo in digest backport patch from the previous build
  Resolves: rhbz#1360687</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-4" date="1490097600">- RHEL 7.4 erratum
- fixed cmnd_no_wait patch
- backported iolog_flush sudoers default
  Resolves: rhbz#1369856
  Resolves: rhbz#1425853</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-5" date="1493121600">- RHEL 7.4 erratum
- added doc patch about sudo lookup issue
  Resolves: rhbz#1293306
- added test suite patch
  Resolves: rhbz#1360687
- fixed use after free fqdn problem
  Resolves: rhbz#1360687</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-6" date="1493899200">- RHEL 7.4 erratum
- added patch that fixes lecture option used as bolean
  Resolves rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-7" date="1495540800">- RHEL 7.4 erratum
- added patch to fix output truncation (in some cases) when log_output
  option is enabled
  Resolves: rhbz#1454571</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.19p2-8" date="1495713600">- RHEL 7.4 erratum
- Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
  Resolves: rhbz#1455402</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1503057600">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1482929</changelog>
</package>
<package pkgid="1aac0ffdc63de2ab2133af828dcb953bd006cdd2c8984b8c7b3172d111cbdba6" name="systemd" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="db3d51ae118cea23e4e1ffeef2e6f4d9d71e616070c7c64eb004b5ac678896a4" name="systemd" arch="src">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="0f254dbae4a392df0b92d117a8264ce938c785f996064d55e37495253cced578" name="systemd" arch="src">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="99d6caa5e143b6f53ae6d66ef64bfdbcae2379e5c8e2dbacce4852bb02d4f8b1" name="systemd" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="7bef9b53de8d3372c933e6bef615869c9e55ab55309b6ab986efd97b6bec3601" name="systemd" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="b11bfaafabfee8c3089157df6a27cff56fee87c89e1588c04cf3a220903d0d2e" name="systemd" arch="src">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="64f7f5ae1244e8c0d3faf10cb0fc0ca07eab7c83db8115644fabd558541cb8ed" name="systemd" arch="src">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="adc418ddd71c6d8d642e826d690223cf465fed3c0afcf9879df06d4d3904cdbc" name="systemd" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="d74cec69a29eb631d17cff39926f27643c1aa9bbb4960d98b177b6367c749390" name="systemd" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="c8aa674c5872855261f91db0fd1d3bc7d61f4d3b54290dbd8f4b2cb84e83e377" name="systemd" arch="src">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="88861b7f41b253dacb7db1f4a3c7186dcb96e5b9cac633b591a3f850786e5e2c" name="systemd" arch="src">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="4217b778d8d292b83de43cdc50a2c85394cfaa5b8f5ba2673482c439c13d95ea" name="systemd" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="f7f7869d6e9aac2e97c56e44015a998d70805fa2987b8fa8df420e72004e4d9f" name="systemd" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="77fe0af3f7f2c6b5878b8efa0bedac5f8e69c080b943940542c1940ec42e5196" name="systemd" arch="src">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="9b39f324470f7a22696739a04c3110685cf40d3a5fe16b628583f0a7ed160698" name="systemd" arch="src">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="8bdbec13b597a35912c5322d649dcabee11328da10c4114fd027f194cc5905da" name="systemd" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="8bb35538a597ea45536b6aec540d155762ebabd66ed52f6ba5f491787e7f92c1" name="systemd" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="598e80beb5acc76f8ebfa4541ee8b19e96acb7791c58e59d54b80ad5889d3439" name="systemd" arch="src">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="aaf2c2661f34e4760838424c0ae964aa4c08616bdfbf429bca0a3ed266f5451b" name="systemd" arch="src">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="a8857d62c2f67d88ff289a6985cf573b6301748e815119911a88986b7d2cbb8e" name="systemd" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="eced1514f0dca1596f059836346ff0fdaff1d2e30c2c217252e38c3ca6e3eb3c" name="systemd-debuginfo" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="5e7b4663b7302ca0a1141d22341b27a65b1d684eb966ed272087ed43a981428c" name="systemd-debuginfo" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="3a37817a9e51b65d563e04fe749d291b6e474477681a1c3d5935ea5ce00b4f4e" name="systemd-debuginfo" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="d5b913f12a5ece2a585bb5bda5ce5250afba25c0add90c31dfec2cf0a70f42ff" name="systemd-debuginfo" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="7e476249001a14230a86c7ecf45bd97db18850e94e66d78e742fae0a9e6c0b21" name="systemd-debuginfo" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="46b228e0123bfb32a0ada032b2c3bfc85c45148c31d3d52e7b1b30171406f60b" name="systemd-debuginfo" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="185c6f8c02aea043bb9fdeb419e7cd5f3e65cca49fe56d2a5873b514c62ba0d6" name="systemd-debuginfo" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="32445540e399c8062a99d88775a12b5852ce8d0644599270e3198f40466324b7" name="systemd-debuginfo" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="d29162a4a22f95a97c569b5ba3a87789ccf32781bca81db58c594c20ac92e1fe" name="systemd-debuginfo" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="5456ac5a21ed37a06503c3ad34a7f1c67b8b596670ccdca1e4684fedadbcb391" name="systemd-debuginfo" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="31122fc93d8b72471010b90f55133c57006fdb185f420b96946c00c5d3892354" name="systemd-devel" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="187f4cf91d15f138efaf5dbb244c449aed90c2143c75a280c3383e1ab61a0d70" name="systemd-devel" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="60fbd56aabcb741b1ab596de2f0f5782ac0c34f6a3eb327f7d14acd388055b26" name="systemd-devel" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="89373ff00b349271be66a1fd359cb04e61cac98ddc9f0ad381e74e95ba55a620" name="systemd-devel" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="30c3bf79881e9b6a12fe66c06e5580f0b468575e9d211f57055673115a736630" name="systemd-devel" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="e2e3ca887ed2009366944f723ff7ce9ab3bed6997091ba90d13cd68c387c5791" name="systemd-devel" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="c5ada20a3061dfaa1adfe39680569f44e743fdb936cb81634c82b280efa3b82d" name="systemd-devel" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="963e9a9928561f95be7c587de8d758713041885f4149f68cba9495c3e2b8c0bf" name="systemd-devel" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="53c90fdea0e10050c48b7edd1380397eadcfa3a0bd6f7b2ef54bc19980c1c789" name="systemd-devel" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="e90e4b9686e88f79ee5195efb74f0b5f8ff87f85f25b371fb9d7bd80280ed6aa" name="systemd-devel" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="57750882c004b8f5f106d2abe6b99c058f1eae8f4b7bec2bc3ec8586998ab5cb" name="systemd-journal-gateway" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="ca6482e849c4f19d9214c617a64f8fad0d4da7b12fddd7bc5bec78aa02356054" name="systemd-journal-gateway" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="af54b2d8ef1d7dfe477380f58b0fe470ed46931303362627321f26c5ee91f09b" name="systemd-journal-gateway" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="a59ce8632e7b4ecd1dbfbbcb843291145976b349d1c919155e2d33faa1e4ff7f" name="systemd-journal-gateway" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="2e140047b1fb22837fa506a6a27e531f0994e9546ca57478fb05e4e5f4d16d1d" name="systemd-journal-gateway" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="e60b2254479ea971b4d56114d5607be8d2faba82083e056327dc63b775ef4e76" name="systemd-journal-gateway" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="c144da77ee14b0b250da8d99c4dd8135a1ac1a075b8e509e99b335a53a02bf5f" name="systemd-journal-gateway" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="1dc624d78e3f8e88c096bb5568f5d950443fafb53033540b2bdef6547946a55f" name="systemd-journal-gateway" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="567ad50759115b7e66094fdbdf6dc152a5e0c3b313476fb4d3d60f571b9de768" name="systemd-journal-gateway" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="49cfa460e90bcf3449ad2c50b256918825a018a2e512fab84fc1bd57280ac281" name="systemd-journal-gateway" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="0e144341cb3726c24797abb338ed41f440e210e7ccf8561684035ef694617c9c" name="systemd-libs" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="3fd0d209fe26cab064bfabd2a3c5573df5b477c6e3dfcba9043f5ff2236f1ef2" name="systemd-libs" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="46b1c1a6b74768f08b2d36e2e27b5b6a15fc0ec0f4b25ff96626916cdb8fc5e8" name="systemd-libs" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="59f1513422bbc3bb2e576fd648864027ddded955d07994bc4ce8e4f54f482b3d" name="systemd-libs" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="21b8e35fd141fc1a4de359e918253d4ad5eecbcffb5ff338a4e11b3a4d0b690c" name="systemd-libs" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="20cc1896d24454865d74bec1a3371e0a48c9901a3f68139748d8e68c891fd8c8" name="systemd-libs" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="935e274a969867523a8d4662504274974147ece81c8dd3d733f2200be9af3520" name="systemd-libs" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="f1b54788772441dd2074571b4aceeb1839f1076b1450e53cda095a509de68ba7" name="systemd-libs" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="54b6f6514a7d859f2f1e852dc829826705a34bb562ed24c0158367a4487da7cb" name="systemd-libs" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="ed06761a8bf8ace1d9bb9c4874856704984abc8ec47b97fc4730ba44a5fc2b9c" name="systemd-libs" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="3a0a499ef588d52534e8b3a8e3907948ff17dc4a6f6718af3986a54fa31d59ea" name="systemd-networkd" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="7505e6b96d2d6c0984af05c71c3a5a083a54d368f620faf7fc3b3e90477d5ba5" name="systemd-networkd" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="3adc9aaec4f193f007fa826cbae451114c261a7af26845e6d38f8655fe70ca5e" name="systemd-networkd" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="ffb8b080539cd739b12c7486e33bb49061dc6ef87bced334a9790e939df1b82d" name="systemd-networkd" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="98d7e62e6e476d465f3bc08bff8f19091c5d38d9e2f8c7745970f154eb2f24f3" name="systemd-networkd" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="aca9e9696a68ef218dfaf354705a597e6cddcae02ab69dbc3c8d85453400f639" name="systemd-networkd" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="2fc6810fca2a551c0ed444cf28a6fcdb526eeec458a7b3658974b8452f58a95b" name="systemd-networkd" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="ec0ba5a1ce179c6fab5dfb77b0a91f9e742e9a1df2c2d6753c05a0293cfa8581" name="systemd-networkd" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="b838e09cfe2bd132e59e8fe38ebd567f3d0f5fbe230f772b4c06a6e19fc059dd" name="systemd-networkd" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="5f4445bae8d2cfc7f31c54d412badcb8f4f9c7b10e0dadcb848f37d260595f44" name="systemd-networkd" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="71cdb40f91ab55f9c38847465a28e2a4f6909e02f239ef8e0873c79530172657" name="systemd-python" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="855de2125b712c29093aa3e754d5da00befcbdde0bfd75a2c62d4bde49eb37a5" name="systemd-python" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="b8e98b8d47e0b7c03b34f32c7d696602ae97b31ef7715dcdbf92443c4005bdd2" name="systemd-python" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="39608c9106b8ba0bce36089c9ae7c6042849ab343059846f825dfb4a8b191408" name="systemd-python" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="ce41aa083e1586cf9c53c7decfee0d238978c0b5f42107659d6e1a6546274937" name="systemd-python" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="3fbdfc09d4e27df52d63c3ca633584b9ec4a3148b59da8edbf3f23a8698d9c91" name="systemd-python" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="72295262c3f00f7b54ca58aea47f6686d680a921e8b2576925bbc6294cf00f92" name="systemd-python" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="640f209ee4e1f31305b964f6c4799a529ec06f6243d3186b26b45c2f28af91a8" name="systemd-python" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="9a46873d1077abdbcdd193f45f222496c15d81ebb3e53a33629c36072811b1c4" name="systemd-python" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="498d9777d41f74bd63f6fe3fdb60784c86332c187d9e66ea43722f32445a8ed7" name="systemd-python" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="572f0e50bbd894c6956ff34bdb0267413a2fa31778fda3f4a2c961b1cedd8a94" name="systemd-resolved" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="595f2e5ce4fb8c97b17affcb69fa3bb90cbea909279f52522d100ea93fd6760e" name="systemd-resolved" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="c2d79858077c3a77588cb95726e2a47d96ee00fbbec890d9285afbfd09bc1951" name="systemd-resolved" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="8b0e5602c588b77814cce348733d866c3422d86059a8a2641b76c4fa8279d2fa" name="systemd-resolved" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="b5cad30ce6dfec607c0079e6cd33de5e41fcfaa28c0d070d000f90ef295a74d3" name="systemd-resolved" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="85fbf075af9f20f0042792ad471bc849be5b5a1b83a842b6850e77c8ca55522f" name="systemd-resolved" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="2018313a28d166a7ece8d1174312a69b3fb2919335bf5b170f5413d3b75f4853" name="systemd-resolved" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="78dc613fba2c2d983809bfd267838f8eed05d1d21afcd9f532eb0e859aaf9b5b" name="systemd-resolved" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="d8860a5909bfee69bf8c728cd3f0cc5c188844a1f2b79526b9e29ef0e30b4aba" name="systemd-resolved" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="61915d69afc8d679ce13f3941e8d86c5952ad3ee25368e4e1142686ec2b83047" name="systemd-resolved" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="6f4bc4557a8520f0b610728b99ecc6af746b5e692e3b37ebf967dbf3b51aad49" name="systemd-sysv" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="2c8378331703b55e6af78ce664ebf7df75724624ed2d3c50cae21082b29fdec2" name="systemd-sysv" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="219320a5dc60427b3c7659e9709374780f1b9fd75a68249c0b5c7d8bf255a011" name="systemd-sysv" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="004841569b7b980586ef31726b02e2986b25fa0b2d6ca55aff9d2ad0a1b716c1" name="systemd-sysv" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="5d8d104d3181294d1db481162344bf2a0c9b317d226340e15a5f14a78030a67e" name="systemd-sysv" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="60c9203575f0c51c8cf69d930785026e3eab733d0eab8d0bfd3ad30b974d4b81" name="systemd-sysv" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="fb1e06439796f5b461bd577c5fa35a412db4e2165f17388370bb5398b48c8cdf" name="systemd-sysv" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="47ae0f4ba12ca229ec08043d61c9022d9c8d8d836273e8909db72f581653b347" name="systemd-sysv" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="c062e7b251238c346b03b5e1a568c44c5120d49ee3af8e97122b559256db55b2" name="systemd-sysv" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="4e6b440326c6bf8b87956662b5313daa21ee940effe5e38c479abcaa31db55f7" name="systemd-sysv" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="e6fd7186ea9e4f9c44e547d5cc8644f45c05528b09e4913635dbe99d3c1df406" name="systemtap" arch="i686">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="e45ce10b2d24258213976eef8d7edb620b8bcb8d0c2b5e927a88be7ddb2c015b" name="systemtap" arch="src">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="26a7ffae513adfc6732de6a130e503100a19d650ff60d210948ff8677d449dcc" name="systemtap" arch="src">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="65cbd5e57f1f91eefd711578dafc2c56296b27a9efd791257b332e009d642828" name="systemtap" arch="x86_64">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="5106cf1725f1b3563227f9b73c114092b6745f416a8a539d64ae6857fe944c60" name="systemtap" arch="i686">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="f25bf565bf69e82bec43568f1beab9e5895c551bd7cd0aac200ce5487b9e745a" name="systemtap" arch="src">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="f2c223eb5d65fc756e36dc0f0922ec7ca7f8f013d6ccb222fb6138f777819d6f" name="systemtap" arch="src">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="72ac66094f3ba49e4f4664465123bfe79b315654ba116361aa194a8b57381a91" name="systemtap" arch="x86_64">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="d98b0045cefae600e082683500f828d76eaccc8c6587253a8743d64f43b83515" name="systemtap-client" arch="i686">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="564caf8420666392a009dcfdd39f89b9253073e57aab75b92996264e7d3ab7c1" name="systemtap-client" arch="x86_64">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="c0f7f0fa468f17de4e99b1a44c67816a751d54bd1b9f78c9910da3892177dc43" name="systemtap-client" arch="i686">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="cd07126ba701ef9f6ef8d4ebdcf8e111742dde9b5fc4027928b7ed8a4525caf7" name="systemtap-client" arch="x86_64">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="80bd1fe7c84d88e8d5a48b5e45d6b6ad650c7f83792496c9aec7bcbdbba2366c" name="systemtap-debuginfo" arch="i686">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="92e0cf66edb1c1ab5f46b7889dfef79c4bdac56d1d6de94ee19f62f437fcadce" name="systemtap-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="4d28911ff3d66d0d4a44e7a8cdda4bd73e0d182f7044eb7f080852cbfc07cdf5" name="systemtap-debuginfo" arch="i686">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="27233012625926f3a88ba01916761dc7a2a2ee85c4ed5ffa68e112c8d314c8bb" name="systemtap-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="e1cbcbb7f963b3471a53edbced363e37206bd54ccd09c0e5ce1acc9caccdb534" name="systemtap-devel" arch="i686">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="d1c32721460e948b5c0d9c589ebd3f12a94a66c8cf7066481dbc3e26259431c2" name="systemtap-devel" arch="x86_64">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="597f797d1f845add88a2595b987c9e687839a48247848372257971b7549353bd" name="systemtap-devel" arch="i686">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="4a97b52b1899c1e6527c6a76875616f15f1b698a1d68e706c2ea1f355dd65692" name="systemtap-devel" arch="x86_64">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="85edd683104e0b86c32abf1cb581b8a1d00876eac6f34d677e454867341a7219" name="systemtap-initscript" arch="i686">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="d3bca54c66877a785920b78c1e416eea5ea6e59166b11f0386274a45f232cf99" name="systemtap-initscript" arch="x86_64">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="792258864af4a19d19f0dc688ae39d1bd1d4a845400f4426895bd425be159998" name="systemtap-initscript" arch="i686">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="bc30ad4c0ffe7778d0c1c79ad91318c624b21b8b540fb0710f93d2ab99f336c5" name="systemtap-initscript" arch="x86_64">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="632c532cc12a1fe15050f7e42fc3c34fcf387a83ffa43e28c3922e3022c1cb8a" name="systemtap-runtime" arch="i686">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="260647f06f9fc399a762b8a7152d08975664a15ae9d4f5d1da6d0372d6ddba71" name="systemtap-runtime" arch="x86_64">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="917ab59cd87c9997d46e60a85953c8e66e2e6e7eeb0bdebd9577485a211e7956" name="systemtap-runtime" arch="i686">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="bcecfb46bbe69face1de821e60120c91b1eca63d2aa8c015ade4ed1a6d4c8dc3" name="systemtap-runtime" arch="x86_64">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="25677addadd17cebd5a472fc1cd1e0f615d76d056f1f10d638209c8d98122fea" name="systemtap-runtime-java" arch="i686">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="60dcfcefb34e6b4ff8268d2b5967b7ea8302fe8383a65bc58336b6f2a8b60f8a" name="systemtap-runtime-java" arch="x86_64">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="d168b363f98481eb4eb1b2c9312ebe0f377d20f8c0026e2389c803ad0592340c" name="systemtap-runtime-java" arch="i686">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="587f0ca0adb38001cebcbd166339b92055725cb1a5c458f4d3167d8b7f96e60d" name="systemtap-runtime-java" arch="x86_64">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="8cc610a5e603b559fdf7c3307cb412b70a3ae179ff5da773bf70403868421aff" name="systemtap-runtime-python2" arch="i686">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="b12bb4cb768d823141e7e4bd64b980134819158429dc851fff59159793f91d3a" name="systemtap-runtime-python2" arch="x86_64">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="0a265eaf0004b6092767343db22db94e28c31535ab6908758bd42c355098f544" name="systemtap-runtime-python2" arch="i686">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="3a6837ac28eb3ce5538e28b746a14d8a4fd49226ea5ed17960a675450ba73969" name="systemtap-runtime-python2" arch="x86_64">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="ed8adc5379ea3135075c21ec93bf9a951fedabafbb69e1cc7bc691f5c26a804c" name="systemtap-runtime-virtguest" arch="i686">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="4942bd7007a2f6ee09b89d9110215aa61da7254b43462a7d269f6d7630ee1a29" name="systemtap-runtime-virtguest" arch="x86_64">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="ff0070fb913a7b244f18e0d918aeff35ac15beb209434d4580450b20e97f6136" name="systemtap-runtime-virtguest" arch="i686">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="7df1d0cfeff4c3dc35a3b5cc71f732a0e8c8b0e9f7e5dc4daa8ea935fec5b5e4" name="systemtap-runtime-virtguest" arch="x86_64">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="1739c4d1146111ac55ef31e669f501acb414d3e4d2a238f236302c674fec0123" name="systemtap-runtime-virthost" arch="i686">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="64a57800b2968c3c3aeb74d9210f0c306092377a18d3010e07ac0a3b21b2a5b4" name="systemtap-runtime-virthost" arch="x86_64">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="8f94a7d59d296369409fd6e5dfb41d2b7c9dc28ad369e8fccccd4306c628f3fd" name="systemtap-runtime-virthost" arch="i686">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="37c9a0950d69e19722d8daefaa8861e8ee9d7142642809b431b2c30c41a5d46a" name="systemtap-runtime-virthost" arch="x86_64">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="4cda531e951ae679292d5333cef34ace03da5903e6d67f88c7f71ab9f7003461" name="systemtap-sdt-devel" arch="i686">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="981acd9a22da97c184ef5f151f31d4c56556b62d0428ee5597d417053f68e76f" name="systemtap-sdt-devel" arch="x86_64">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="979d4dee0c928191602c6f8b699bf7a3ffa707c4e42a902f37436011d6997d14" name="systemtap-sdt-devel" arch="i686">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="e09c6ad4c1d81a6b9c5653e42485f2041352223b666fe74f4344dd93662c9e9c" name="systemtap-sdt-devel" arch="x86_64">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="34089cc5c5426eb477f1328498cb3a8466bd19f7542d3433f6251ff6047cca99" name="systemtap-server" arch="i686">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="3f66f3f82540e0e3310be4c4fc0d0e397ae174fd5c1b73e90177cdf9a3e30927" name="systemtap-server" arch="x86_64">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="25f5bfc5a45fc8f6a7837245c323fe5be5a6360c3e7a6b432b24eb7e89ff78a9" name="systemtap-server" arch="i686">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="39915786dca8bb56db5f75e3a9a23eb96aa997d9fc3962781e0f36f095fe6ace" name="systemtap-server" arch="x86_64">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="cdd9317fade4d020e2c59854f130babd02b3fa43a8af220ad5492a56e0348c9c" name="systemtap-testsuite" arch="i686">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="afeedcb1113440ff9afb6f68ab372036c020c93e683b9f00238ca0a607bb40ad" name="systemtap-testsuite" arch="x86_64">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="0f91c9f2623d3fafb1ec22e00388bf5d45b0004163f8737ab6f007bfac51d673" name="systemtap-testsuite" arch="i686">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="8b20ba8aaf7bb09799d895ae6aea138218aee3e141221717d14cf1a65ef30168" name="systemtap-testsuite" arch="x86_64">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="7b6b38692f1b1272474751484eeedb2e7cdc8f598533ed5aa43abd01ed3d2d4b" name="teamd" arch="i686">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="6182247fc55b5e9738e0ab6f4938a2952a19ead32385e802850dbba83ba7a526" name="teamd" arch="x86_64">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="975c84a432d7b0a920605b4772ba0d610d2a6d420e8b679e310f04efd4e91d8d" name="teamd-devel" arch="i686">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="b9f0c9a6bf6144c8ce05d309970869e966ca28d0970bb5b7d883179fda843e7f" name="teamd-devel" arch="x86_64">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="1b0eff5a19a4a66129d455ab3f74bb49244f532ef51c963f6b6e77460239d6ac" name="thunderbird" arch="i686">
  <version epoch="0" ver="52.3.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.1-1" date="1480593600">- Update to 45.5.1</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-1" date="1481889600">- Update to the latest upstream (45.6.0)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.3.0-1" date="1503576000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="0bf81254828d12cc09963dc5c2e3baf6dbec4286efc6100cd95d47b200de1c1a" name="thunderbird" arch="src">
  <version epoch="0" ver="52.3.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.1-1" date="1480593600">- Update to 45.5.1</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-1" date="1481889600">- Update to the latest upstream (45.6.0)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.3.0-1" date="1503576000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="9e916de1f749ae729e0532961db84d597203b7de78e2bcfaa3324e872eb53323" name="thunderbird" arch="src">
  <version epoch="0" ver="52.3.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.1-1" date="1480593600">- Update to 45.5.1</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-1" date="1481889600">- Update to the latest upstream (45.6.0)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.3.0-1" date="1503576000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="b6b9d16bb2a5ca8f215626b02d99b65a728b7776403044cafcd8675b2c51452d" name="thunderbird" arch="x86_64">
  <version epoch="0" ver="52.3.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.1-1" date="1480593600">- Update to 45.5.1</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-1" date="1481889600">- Update to the latest upstream (45.6.0)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.3.0-1" date="1503576000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="2c35f54a9630af65db66fcd553fac7b55bd5b66ce3bc21a3c142902ef8eaabce" name="thunderbird" arch="i686">
  <version epoch="0" ver="52.4.0" rel="2.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.1-1" date="1480593600">- Update to 45.5.1</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-1" date="1481889600">- Update to the latest upstream (45.6.0)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
</package>
<package pkgid="1cfd0f73e746412265214749f83e2296107823a6f81021468d17978bb46c2218" name="thunderbird" arch="src">
  <version epoch="0" ver="52.4.0" rel="2.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.1-1" date="1480593600">- Update to 45.5.1</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-1" date="1481889600">- Update to the latest upstream (45.6.0)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
</package>
<package pkgid="1b5803915a706a41d019f4187e0acca94b421788d3534fff411521095c5e1f82" name="thunderbird" arch="src">
  <version epoch="0" ver="52.4.0" rel="2.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.1-1" date="1480593600">- Update to 45.5.1</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-1" date="1481889600">- Update to the latest upstream (45.6.0)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
</package>
<package pkgid="ac855b418302e903129ff9e55a7e03defcfe86aea4c3e4be37fb83b6e925f40e" name="thunderbird" arch="x86_64">
  <version epoch="0" ver="52.4.0" rel="2.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.1-1" date="1480593600">- Update to 45.5.1</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-1" date="1481889600">- Update to the latest upstream (45.6.0)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
</package>
<package pkgid="78d252d616d3e2c97412be6ab6a6d5468bf3731a487daeb549c074c722d62199" name="thunderbird" arch="i686">
  <version epoch="0" ver="52.5.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.5.0-1" date="1512388800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="c10692ff6779a250da1d234d21b0af8742eee85400c390bac5be3e66625e5657" name="thunderbird" arch="src">
  <version epoch="0" ver="52.5.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.5.0-1" date="1512388800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="c192923c4c78df4385d5e791f5bad41506fd50558144d8938ed1e960aceada82" name="thunderbird" arch="src">
  <version epoch="0" ver="52.5.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.5.0-1" date="1512388800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="20c21f84aa691b1a734e78682e5321362885dc0743b68cd9e1a00b9451c7b589" name="thunderbird" arch="x86_64">
  <version epoch="0" ver="52.5.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.5.0-1" date="1512388800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="d8507b1a1fc081762b4578d816da1792d92e5c4b0ee9595f6932e7ddf2b18d9a" name="thunderbird" arch="i686">
  <version epoch="0" ver="52.5.2" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.5.2-1" date="1515412800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="ac27c832125136cdcc9e65d1237d883f74d2e4e792236f60ef6f12d33f79e753" name="thunderbird" arch="src">
  <version epoch="0" ver="52.5.2" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.5.2-1" date="1515412800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="49fa6f011f2e11ca3354c29cb23763557a1ef9dae15e92ee27b7ae3b6c9e50b1" name="thunderbird" arch="src">
  <version epoch="0" ver="52.5.2" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.5.2-1" date="1515412800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="1d2417867662ee12589f8ec72edc271dbacae00ee4cd6f88fee06aa7418c2e73" name="thunderbird" arch="x86_64">
  <version epoch="0" ver="52.5.2" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.5.2-1" date="1515412800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="79d914ff1454fd8e9c1f3616dbbfa6d290e8fb9cf45641626882a4366f09222c" name="thunderbird" arch="i686">
  <version epoch="0" ver="52.6.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
</package>
<package pkgid="8db2c9403384747af91847d399a6e07b68518a8d635d16b287e2f09ac15edd9e" name="thunderbird" arch="src">
  <version epoch="0" ver="52.6.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
</package>
<package pkgid="ad0adbf002993c2d97aeb0aafdce2df399420a0ad24a7a7f8d8e632e4e1c1f21" name="thunderbird" arch="src">
  <version epoch="0" ver="52.6.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
</package>
<package pkgid="0675d985e29d879dd2e2749fb636edc058b518a19fb273d912ec5820e5106d96" name="thunderbird" arch="x86_64">
  <version epoch="0" ver="52.6.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
</package>
<package pkgid="bef975046b566e5e2f569fb6f2a98ecada244c3694fd8d1b746b978f0b697d55" name="thunderbird" arch="i686">
  <version epoch="0" ver="52.7.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.7.0-1" date="1523275200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="3616e884c4ed0da98d68e772da314ded4e34361e98349a21eb1af720e32935b3" name="thunderbird" arch="src">
  <version epoch="0" ver="52.7.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.7.0-1" date="1523275200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="ad17bd3a03295ba41b540736accdd54b9a8a792e79e665112ac7af562fa65317" name="thunderbird" arch="src">
  <version epoch="0" ver="52.7.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.7.0-1" date="1523275200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="4add1cd814c169c3d66b9786c8e7ae14cdbf3daec357e97fdc4f2091f5672c63" name="thunderbird" arch="x86_64">
  <version epoch="0" ver="52.7.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.7.0-1" date="1523275200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="60dd32bc11db6282af84a944798ea19c8036b50a0305ab261b28ae3c99430dd0" name="thunderbird-debuginfo" arch="i686">
  <version epoch="0" ver="52.3.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.1-1" date="1480593600">- Update to 45.5.1</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-1" date="1481889600">- Update to the latest upstream (45.6.0)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.3.0-1" date="1503576000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="716d5cf336ad93ea53dfb95dd88bb6e185a4767b112b0d0c2247d7d52b296eb0" name="thunderbird-debuginfo" arch="x86_64">
  <version epoch="0" ver="52.3.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.1-1" date="1480593600">- Update to 45.5.1</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-1" date="1481889600">- Update to the latest upstream (45.6.0)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.3.0-1" date="1503576000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="07185792c31d67d9205ec00182a54225516bbc1052a11e98bbfe2a6b15ce96f7" name="thunderbird-debuginfo" arch="i686">
  <version epoch="0" ver="52.4.0" rel="2.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.1-1" date="1480593600">- Update to 45.5.1</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-1" date="1481889600">- Update to the latest upstream (45.6.0)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
</package>
<package pkgid="ec7ca2b533efa01bf8c9808ab84d7caa704985905d9ffef041b54fd77a2cbfa0" name="thunderbird-debuginfo" arch="x86_64">
  <version epoch="0" ver="52.4.0" rel="2.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.1-1" date="1480593600">- Update to 45.5.1</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-1" date="1481889600">- Update to the latest upstream (45.6.0)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
</package>
<package pkgid="f0e647640634c136789fd4bab3e261933351f8472f6364432dacdb6255820a8f" name="thunderbird-debuginfo" arch="i686">
  <version epoch="0" ver="52.5.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.5.0-1" date="1512388800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="a0e7e3985e067afd93d539e883d35bf79fe4abb65ff82cc64af2bce3837e59a6" name="thunderbird-debuginfo" arch="x86_64">
  <version epoch="0" ver="52.5.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.5.0-1" date="1512388800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="c8178b3ff2270872be3b58d732c1fac3ccd31fd066009d1b7d70cafc2eaeeedd" name="thunderbird-debuginfo" arch="i686">
  <version epoch="0" ver="52.5.2" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.5.2-1" date="1515412800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="fd40df12ea7a079bb2f9161c0e97d5f53a44b6ab296650e6adcab458c692d4d0" name="thunderbird-debuginfo" arch="x86_64">
  <version epoch="0" ver="52.5.2" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.5.2-1" date="1515412800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="01b9c41ecbc3f05ffdfb9106f67c669cbbf94cc84952cc016e068a6b91eab709" name="thunderbird-debuginfo" arch="i686">
  <version epoch="0" ver="52.6.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
</package>
<package pkgid="38ac931802348841c56885a5067e84df4f49d8b15331a03be9ea6b21ec9e7692" name="thunderbird-debuginfo" arch="x86_64">
  <version epoch="0" ver="52.6.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
</package>
<package pkgid="ebc13bb2e93d777bb3813423f4fd043e20fdcab490b787aec52b2e8cd45ac3a6" name="thunderbird-debuginfo" arch="i686">
  <version epoch="0" ver="52.7.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.7.0-1" date="1523275200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="99a757c668314d2113634da35c2477516f553a2bcefbd5e95f8847fdd86ddf0e" name="thunderbird-debuginfo" arch="x86_64">
  <version epoch="0" ver="52.7.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.7.0-1" date="1523275200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="64b14b82ef44e792a5e3810e60a8eea21e49423df5373c76cdbcc23032d3f904" name="tigervnc" arch="i686">
  <version epoch="0" ver="1.8.0" rel="2.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-7" date="1464177600">- Restore default behaviour to listen on TCP
  Resolves: bz#1304646</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-8" date="1464868800">- Make other security types work
  Resolves: bz#1341969</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-9" date="1473768000">- Force DT_RUNPATH to point to Mesa's libGL
  Resolves: bz#1326867</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-1" date="1487678400">- Update to 1.7.1
  Resolves: bz#1388620
  Resolves: bz#1343899
  Resolves: bz#1410164
  Resolves: bz#1415547
  Resolves: bz#1418945
  Resolves: bz#1416290
  Resolves: bz#1342956
- Fix shared memory leakage
  Resolves: bz#1358090
- Added systemd unit file for xvnc
  Resolves: bz#1393971</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-2" date="1491393600">- Be more restrictive with shared memory mode bits
  Resolves: bz#1152552
  Limit max username/password size in SSecurityPlain [CVE-2017-7394]
  Resolves: bz#1438737
  Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
  Resolves: bz#1438742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-3" date="1491393601">- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
  Resolves: bz#1439127
  Prevent double free by crafted fences [CVE-2017-7393]
  Resolves: bz#1439134</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-1" date="1492689600">- Update to 1.7.90
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-2" date="1493726400">- Make RandR callbacks optional
  Resolves: bz#1444948</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-1" date="1495022400">- Update to 1.8.0
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-2" date="1507809600">- Make TLS work on FIPS systems
  Resolves: bz#1501165</changelog>
</package>
<package pkgid="44f6db79573cd406da5e86729c2cf915e87709e0242e4727e7a4252745d00552" name="tigervnc" arch="src">
  <version epoch="0" ver="1.8.0" rel="2.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-7" date="1464177600">- Restore default behaviour to listen on TCP
  Resolves: bz#1304646</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-8" date="1464868800">- Make other security types work
  Resolves: bz#1341969</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-9" date="1473768000">- Force DT_RUNPATH to point to Mesa's libGL
  Resolves: bz#1326867</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-1" date="1487678400">- Update to 1.7.1
  Resolves: bz#1388620
  Resolves: bz#1343899
  Resolves: bz#1410164
  Resolves: bz#1415547
  Resolves: bz#1418945
  Resolves: bz#1416290
  Resolves: bz#1342956
- Fix shared memory leakage
  Resolves: bz#1358090
- Added systemd unit file for xvnc
  Resolves: bz#1393971</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-2" date="1491393600">- Be more restrictive with shared memory mode bits
  Resolves: bz#1152552
  Limit max username/password size in SSecurityPlain [CVE-2017-7394]
  Resolves: bz#1438737
  Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
  Resolves: bz#1438742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-3" date="1491393601">- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
  Resolves: bz#1439127
  Prevent double free by crafted fences [CVE-2017-7393]
  Resolves: bz#1439134</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-1" date="1492689600">- Update to 1.7.90
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-2" date="1493726400">- Make RandR callbacks optional
  Resolves: bz#1444948</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-1" date="1495022400">- Update to 1.8.0
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-2" date="1507809600">- Make TLS work on FIPS systems
  Resolves: bz#1501165</changelog>
</package>
<package pkgid="a90c7ff8096dee7874c0baebf03ebf7fbe99bc463562f1e5c97ad55dfbc1fe45" name="tigervnc" arch="src">
  <version epoch="0" ver="1.8.0" rel="2.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-7" date="1464177600">- Restore default behaviour to listen on TCP
  Resolves: bz#1304646</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-8" date="1464868800">- Make other security types work
  Resolves: bz#1341969</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-9" date="1473768000">- Force DT_RUNPATH to point to Mesa's libGL
  Resolves: bz#1326867</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-1" date="1487678400">- Update to 1.7.1
  Resolves: bz#1388620
  Resolves: bz#1343899
  Resolves: bz#1410164
  Resolves: bz#1415547
  Resolves: bz#1418945
  Resolves: bz#1416290
  Resolves: bz#1342956
- Fix shared memory leakage
  Resolves: bz#1358090
- Added systemd unit file for xvnc
  Resolves: bz#1393971</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-2" date="1491393600">- Be more restrictive with shared memory mode bits
  Resolves: bz#1152552
  Limit max username/password size in SSecurityPlain [CVE-2017-7394]
  Resolves: bz#1438737
  Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
  Resolves: bz#1438742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-3" date="1491393601">- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
  Resolves: bz#1439127
  Prevent double free by crafted fences [CVE-2017-7393]
  Resolves: bz#1439134</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-1" date="1492689600">- Update to 1.7.90
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-2" date="1493726400">- Make RandR callbacks optional
  Resolves: bz#1444948</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-1" date="1495022400">- Update to 1.8.0
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-2" date="1507809600">- Make TLS work on FIPS systems
  Resolves: bz#1501165</changelog>
</package>
<package pkgid="30898812cf502a90bc9d99caa1040a9055d3fc31c39ffae97d9489bbdf2ce141" name="tigervnc" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="2.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-7" date="1464177600">- Restore default behaviour to listen on TCP
  Resolves: bz#1304646</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-8" date="1464868800">- Make other security types work
  Resolves: bz#1341969</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-9" date="1473768000">- Force DT_RUNPATH to point to Mesa's libGL
  Resolves: bz#1326867</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-1" date="1487678400">- Update to 1.7.1
  Resolves: bz#1388620
  Resolves: bz#1343899
  Resolves: bz#1410164
  Resolves: bz#1415547
  Resolves: bz#1418945
  Resolves: bz#1416290
  Resolves: bz#1342956
- Fix shared memory leakage
  Resolves: bz#1358090
- Added systemd unit file for xvnc
  Resolves: bz#1393971</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-2" date="1491393600">- Be more restrictive with shared memory mode bits
  Resolves: bz#1152552
  Limit max username/password size in SSecurityPlain [CVE-2017-7394]
  Resolves: bz#1438737
  Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
  Resolves: bz#1438742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-3" date="1491393601">- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
  Resolves: bz#1439127
  Prevent double free by crafted fences [CVE-2017-7393]
  Resolves: bz#1439134</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-1" date="1492689600">- Update to 1.7.90
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-2" date="1493726400">- Make RandR callbacks optional
  Resolves: bz#1444948</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-1" date="1495022400">- Update to 1.8.0
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-2" date="1507809600">- Make TLS work on FIPS systems
  Resolves: bz#1501165</changelog>
</package>
<package pkgid="358da521883d08f01b91fd552a98e245a64aea56c2e3c90178c6a6256b0e5e16" name="tigervnc-debuginfo" arch="i686">
  <version epoch="0" ver="1.8.0" rel="2.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-7" date="1464177600">- Restore default behaviour to listen on TCP
  Resolves: bz#1304646</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-8" date="1464868800">- Make other security types work
  Resolves: bz#1341969</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-9" date="1473768000">- Force DT_RUNPATH to point to Mesa's libGL
  Resolves: bz#1326867</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-1" date="1487678400">- Update to 1.7.1
  Resolves: bz#1388620
  Resolves: bz#1343899
  Resolves: bz#1410164
  Resolves: bz#1415547
  Resolves: bz#1418945
  Resolves: bz#1416290
  Resolves: bz#1342956
- Fix shared memory leakage
  Resolves: bz#1358090
- Added systemd unit file for xvnc
  Resolves: bz#1393971</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-2" date="1491393600">- Be more restrictive with shared memory mode bits
  Resolves: bz#1152552
  Limit max username/password size in SSecurityPlain [CVE-2017-7394]
  Resolves: bz#1438737
  Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
  Resolves: bz#1438742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-3" date="1491393601">- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
  Resolves: bz#1439127
  Prevent double free by crafted fences [CVE-2017-7393]
  Resolves: bz#1439134</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-1" date="1492689600">- Update to 1.7.90
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-2" date="1493726400">- Make RandR callbacks optional
  Resolves: bz#1444948</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-1" date="1495022400">- Update to 1.8.0
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-2" date="1507809600">- Make TLS work on FIPS systems
  Resolves: bz#1501165</changelog>
</package>
<package pkgid="01db8305906694cb4d92e5613e9d2c6f8c92ccdd44c651a7572392adc2bf37d0" name="tigervnc-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="2.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-7" date="1464177600">- Restore default behaviour to listen on TCP
  Resolves: bz#1304646</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-8" date="1464868800">- Make other security types work
  Resolves: bz#1341969</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-9" date="1473768000">- Force DT_RUNPATH to point to Mesa's libGL
  Resolves: bz#1326867</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-1" date="1487678400">- Update to 1.7.1
  Resolves: bz#1388620
  Resolves: bz#1343899
  Resolves: bz#1410164
  Resolves: bz#1415547
  Resolves: bz#1418945
  Resolves: bz#1416290
  Resolves: bz#1342956
- Fix shared memory leakage
  Resolves: bz#1358090
- Added systemd unit file for xvnc
  Resolves: bz#1393971</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-2" date="1491393600">- Be more restrictive with shared memory mode bits
  Resolves: bz#1152552
  Limit max username/password size in SSecurityPlain [CVE-2017-7394]
  Resolves: bz#1438737
  Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
  Resolves: bz#1438742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-3" date="1491393601">- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
  Resolves: bz#1439127
  Prevent double free by crafted fences [CVE-2017-7393]
  Resolves: bz#1439134</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-1" date="1492689600">- Update to 1.7.90
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-2" date="1493726400">- Make RandR callbacks optional
  Resolves: bz#1444948</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-1" date="1495022400">- Update to 1.8.0
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-2" date="1507809600">- Make TLS work on FIPS systems
  Resolves: bz#1501165</changelog>
</package>
<package pkgid="cfa87f89268e54aef7081b1a877a0d55ff3aacce2243816d30a5dd0c5f59a409" name="tigervnc-icons" arch="noarch">
  <version epoch="0" ver="1.8.0" rel="2.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-7" date="1464177600">- Restore default behaviour to listen on TCP
  Resolves: bz#1304646</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-8" date="1464868800">- Make other security types work
  Resolves: bz#1341969</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-9" date="1473768000">- Force DT_RUNPATH to point to Mesa's libGL
  Resolves: bz#1326867</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-1" date="1487678400">- Update to 1.7.1
  Resolves: bz#1388620
  Resolves: bz#1343899
  Resolves: bz#1410164
  Resolves: bz#1415547
  Resolves: bz#1418945
  Resolves: bz#1416290
  Resolves: bz#1342956
- Fix shared memory leakage
  Resolves: bz#1358090
- Added systemd unit file for xvnc
  Resolves: bz#1393971</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-2" date="1491393600">- Be more restrictive with shared memory mode bits
  Resolves: bz#1152552
  Limit max username/password size in SSecurityPlain [CVE-2017-7394]
  Resolves: bz#1438737
  Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
  Resolves: bz#1438742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-3" date="1491393601">- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
  Resolves: bz#1439127
  Prevent double free by crafted fences [CVE-2017-7393]
  Resolves: bz#1439134</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-1" date="1492689600">- Update to 1.7.90
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-2" date="1493726400">- Make RandR callbacks optional
  Resolves: bz#1444948</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-1" date="1495022400">- Update to 1.8.0
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-2" date="1507809600">- Make TLS work on FIPS systems
  Resolves: bz#1501165</changelog>
</package>
<package pkgid="7ea334a38b96f8cd58071fad4a65de760fe7b0f2b56887155bb38241eb2e43b5" name="tigervnc-icons" arch="noarch">
  <version epoch="0" ver="1.8.0" rel="2.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-7" date="1464177600">- Restore default behaviour to listen on TCP
  Resolves: bz#1304646</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-8" date="1464868800">- Make other security types work
  Resolves: bz#1341969</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-9" date="1473768000">- Force DT_RUNPATH to point to Mesa's libGL
  Resolves: bz#1326867</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-1" date="1487678400">- Update to 1.7.1
  Resolves: bz#1388620
  Resolves: bz#1343899
  Resolves: bz#1410164
  Resolves: bz#1415547
  Resolves: bz#1418945
  Resolves: bz#1416290
  Resolves: bz#1342956
- Fix shared memory leakage
  Resolves: bz#1358090
- Added systemd unit file for xvnc
  Resolves: bz#1393971</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-2" date="1491393600">- Be more restrictive with shared memory mode bits
  Resolves: bz#1152552
  Limit max username/password size in SSecurityPlain [CVE-2017-7394]
  Resolves: bz#1438737
  Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
  Resolves: bz#1438742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-3" date="1491393601">- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
  Resolves: bz#1439127
  Prevent double free by crafted fences [CVE-2017-7393]
  Resolves: bz#1439134</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-1" date="1492689600">- Update to 1.7.90
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-2" date="1493726400">- Make RandR callbacks optional
  Resolves: bz#1444948</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-1" date="1495022400">- Update to 1.8.0
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-2" date="1507809600">- Make TLS work on FIPS systems
  Resolves: bz#1501165</changelog>
</package>
<package pkgid="4417c73da3b618dfb2c7057e1453e5884e04300ff26d33b2026812faebf2f139" name="tigervnc-license" arch="noarch">
  <version epoch="0" ver="1.8.0" rel="2.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-7" date="1464177600">- Restore default behaviour to listen on TCP
  Resolves: bz#1304646</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-8" date="1464868800">- Make other security types work
  Resolves: bz#1341969</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-9" date="1473768000">- Force DT_RUNPATH to point to Mesa's libGL
  Resolves: bz#1326867</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-1" date="1487678400">- Update to 1.7.1
  Resolves: bz#1388620
  Resolves: bz#1343899
  Resolves: bz#1410164
  Resolves: bz#1415547
  Resolves: bz#1418945
  Resolves: bz#1416290
  Resolves: bz#1342956
- Fix shared memory leakage
  Resolves: bz#1358090
- Added systemd unit file for xvnc
  Resolves: bz#1393971</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-2" date="1491393600">- Be more restrictive with shared memory mode bits
  Resolves: bz#1152552
  Limit max username/password size in SSecurityPlain [CVE-2017-7394]
  Resolves: bz#1438737
  Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
  Resolves: bz#1438742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-3" date="1491393601">- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
  Resolves: bz#1439127
  Prevent double free by crafted fences [CVE-2017-7393]
  Resolves: bz#1439134</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-1" date="1492689600">- Update to 1.7.90
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-2" date="1493726400">- Make RandR callbacks optional
  Resolves: bz#1444948</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-1" date="1495022400">- Update to 1.8.0
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-2" date="1507809600">- Make TLS work on FIPS systems
  Resolves: bz#1501165</changelog>
</package>
<package pkgid="dc7ef3c3ad83d2eb2ca8ed76282a85bae8de59cc2a7c2ec2927421495541212d" name="tigervnc-license" arch="noarch">
  <version epoch="0" ver="1.8.0" rel="2.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-7" date="1464177600">- Restore default behaviour to listen on TCP
  Resolves: bz#1304646</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-8" date="1464868800">- Make other security types work
  Resolves: bz#1341969</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-9" date="1473768000">- Force DT_RUNPATH to point to Mesa's libGL
  Resolves: bz#1326867</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-1" date="1487678400">- Update to 1.7.1
  Resolves: bz#1388620
  Resolves: bz#1343899
  Resolves: bz#1410164
  Resolves: bz#1415547
  Resolves: bz#1418945
  Resolves: bz#1416290
  Resolves: bz#1342956
- Fix shared memory leakage
  Resolves: bz#1358090
- Added systemd unit file for xvnc
  Resolves: bz#1393971</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-2" date="1491393600">- Be more restrictive with shared memory mode bits
  Resolves: bz#1152552
  Limit max username/password size in SSecurityPlain [CVE-2017-7394]
  Resolves: bz#1438737
  Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
  Resolves: bz#1438742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-3" date="1491393601">- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
  Resolves: bz#1439127
  Prevent double free by crafted fences [CVE-2017-7393]
  Resolves: bz#1439134</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-1" date="1492689600">- Update to 1.7.90
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-2" date="1493726400">- Make RandR callbacks optional
  Resolves: bz#1444948</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-1" date="1495022400">- Update to 1.8.0
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-2" date="1507809600">- Make TLS work on FIPS systems
  Resolves: bz#1501165</changelog>
</package>
<package pkgid="490362c60fe437118dac826adba809e73332f35d7d8c6132ce0784d0e6af285f" name="tigervnc-server" arch="i686">
  <version epoch="0" ver="1.8.0" rel="2.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-7" date="1464177600">- Restore default behaviour to listen on TCP
  Resolves: bz#1304646</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-8" date="1464868800">- Make other security types work
  Resolves: bz#1341969</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-9" date="1473768000">- Force DT_RUNPATH to point to Mesa's libGL
  Resolves: bz#1326867</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-1" date="1487678400">- Update to 1.7.1
  Resolves: bz#1388620
  Resolves: bz#1343899
  Resolves: bz#1410164
  Resolves: bz#1415547
  Resolves: bz#1418945
  Resolves: bz#1416290
  Resolves: bz#1342956
- Fix shared memory leakage
  Resolves: bz#1358090
- Added systemd unit file for xvnc
  Resolves: bz#1393971</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-2" date="1491393600">- Be more restrictive with shared memory mode bits
  Resolves: bz#1152552
  Limit max username/password size in SSecurityPlain [CVE-2017-7394]
  Resolves: bz#1438737
  Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
  Resolves: bz#1438742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-3" date="1491393601">- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
  Resolves: bz#1439127
  Prevent double free by crafted fences [CVE-2017-7393]
  Resolves: bz#1439134</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-1" date="1492689600">- Update to 1.7.90
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-2" date="1493726400">- Make RandR callbacks optional
  Resolves: bz#1444948</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-1" date="1495022400">- Update to 1.8.0
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-2" date="1507809600">- Make TLS work on FIPS systems
  Resolves: bz#1501165</changelog>
</package>
<package pkgid="edb021b8feae4b894550ca6092c20c1889db52c2df79400b36397cbc866fa029" name="tigervnc-server" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="2.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-7" date="1464177600">- Restore default behaviour to listen on TCP
  Resolves: bz#1304646</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-8" date="1464868800">- Make other security types work
  Resolves: bz#1341969</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-9" date="1473768000">- Force DT_RUNPATH to point to Mesa's libGL
  Resolves: bz#1326867</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-1" date="1487678400">- Update to 1.7.1
  Resolves: bz#1388620
  Resolves: bz#1343899
  Resolves: bz#1410164
  Resolves: bz#1415547
  Resolves: bz#1418945
  Resolves: bz#1416290
  Resolves: bz#1342956
- Fix shared memory leakage
  Resolves: bz#1358090
- Added systemd unit file for xvnc
  Resolves: bz#1393971</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-2" date="1491393600">- Be more restrictive with shared memory mode bits
  Resolves: bz#1152552
  Limit max username/password size in SSecurityPlain [CVE-2017-7394]
  Resolves: bz#1438737
  Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
  Resolves: bz#1438742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-3" date="1491393601">- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
  Resolves: bz#1439127
  Prevent double free by crafted fences [CVE-2017-7393]
  Resolves: bz#1439134</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-1" date="1492689600">- Update to 1.7.90
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-2" date="1493726400">- Make RandR callbacks optional
  Resolves: bz#1444948</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-1" date="1495022400">- Update to 1.8.0
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-2" date="1507809600">- Make TLS work on FIPS systems
  Resolves: bz#1501165</changelog>
</package>
<package pkgid="c8bad2b57a9ce7c9720d49ae472e896e58c5c6b0d60d5a9b5abcff3e477eabbf" name="tigervnc-server-applet" arch="noarch">
  <version epoch="0" ver="1.8.0" rel="2.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-7" date="1464177600">- Restore default behaviour to listen on TCP
  Resolves: bz#1304646</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-8" date="1464868800">- Make other security types work
  Resolves: bz#1341969</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-9" date="1473768000">- Force DT_RUNPATH to point to Mesa's libGL
  Resolves: bz#1326867</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-1" date="1487678400">- Update to 1.7.1
  Resolves: bz#1388620
  Resolves: bz#1343899
  Resolves: bz#1410164
  Resolves: bz#1415547
  Resolves: bz#1418945
  Resolves: bz#1416290
  Resolves: bz#1342956
- Fix shared memory leakage
  Resolves: bz#1358090
- Added systemd unit file for xvnc
  Resolves: bz#1393971</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-2" date="1491393600">- Be more restrictive with shared memory mode bits
  Resolves: bz#1152552
  Limit max username/password size in SSecurityPlain [CVE-2017-7394]
  Resolves: bz#1438737
  Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
  Resolves: bz#1438742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-3" date="1491393601">- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
  Resolves: bz#1439127
  Prevent double free by crafted fences [CVE-2017-7393]
  Resolves: bz#1439134</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-1" date="1492689600">- Update to 1.7.90
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-2" date="1493726400">- Make RandR callbacks optional
  Resolves: bz#1444948</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-1" date="1495022400">- Update to 1.8.0
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-2" date="1507809600">- Make TLS work on FIPS systems
  Resolves: bz#1501165</changelog>
</package>
<package pkgid="4701d4af4c64293091a2dc42069b2da16d46023106df853752761429e407c123" name="tigervnc-server-applet" arch="noarch">
  <version epoch="0" ver="1.8.0" rel="2.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-7" date="1464177600">- Restore default behaviour to listen on TCP
  Resolves: bz#1304646</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-8" date="1464868800">- Make other security types work
  Resolves: bz#1341969</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-9" date="1473768000">- Force DT_RUNPATH to point to Mesa's libGL
  Resolves: bz#1326867</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-1" date="1487678400">- Update to 1.7.1
  Resolves: bz#1388620
  Resolves: bz#1343899
  Resolves: bz#1410164
  Resolves: bz#1415547
  Resolves: bz#1418945
  Resolves: bz#1416290
  Resolves: bz#1342956
- Fix shared memory leakage
  Resolves: bz#1358090
- Added systemd unit file for xvnc
  Resolves: bz#1393971</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-2" date="1491393600">- Be more restrictive with shared memory mode bits
  Resolves: bz#1152552
  Limit max username/password size in SSecurityPlain [CVE-2017-7394]
  Resolves: bz#1438737
  Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
  Resolves: bz#1438742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-3" date="1491393601">- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
  Resolves: bz#1439127
  Prevent double free by crafted fences [CVE-2017-7393]
  Resolves: bz#1439134</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-1" date="1492689600">- Update to 1.7.90
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-2" date="1493726400">- Make RandR callbacks optional
  Resolves: bz#1444948</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-1" date="1495022400">- Update to 1.8.0
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-2" date="1507809600">- Make TLS work on FIPS systems
  Resolves: bz#1501165</changelog>
</package>
<package pkgid="b35be8414480b1b74e64425f3b5b791868ebc9b52421e7b71763163f0ee07738" name="tigervnc-server-minimal" arch="i686">
  <version epoch="0" ver="1.8.0" rel="2.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-7" date="1464177600">- Restore default behaviour to listen on TCP
  Resolves: bz#1304646</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-8" date="1464868800">- Make other security types work
  Resolves: bz#1341969</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-9" date="1473768000">- Force DT_RUNPATH to point to Mesa's libGL
  Resolves: bz#1326867</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-1" date="1487678400">- Update to 1.7.1
  Resolves: bz#1388620
  Resolves: bz#1343899
  Resolves: bz#1410164
  Resolves: bz#1415547
  Resolves: bz#1418945
  Resolves: bz#1416290
  Resolves: bz#1342956
- Fix shared memory leakage
  Resolves: bz#1358090
- Added systemd unit file for xvnc
  Resolves: bz#1393971</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-2" date="1491393600">- Be more restrictive with shared memory mode bits
  Resolves: bz#1152552
  Limit max username/password size in SSecurityPlain [CVE-2017-7394]
  Resolves: bz#1438737
  Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
  Resolves: bz#1438742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-3" date="1491393601">- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
  Resolves: bz#1439127
  Prevent double free by crafted fences [CVE-2017-7393]
  Resolves: bz#1439134</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-1" date="1492689600">- Update to 1.7.90
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-2" date="1493726400">- Make RandR callbacks optional
  Resolves: bz#1444948</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-1" date="1495022400">- Update to 1.8.0
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-2" date="1507809600">- Make TLS work on FIPS systems
  Resolves: bz#1501165</changelog>
</package>
<package pkgid="a42eef8ba3201b75790111bd9918dbdfd9b42f055a8e6b423cdbc8e68d0904b5" name="tigervnc-server-minimal" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="2.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-7" date="1464177600">- Restore default behaviour to listen on TCP
  Resolves: bz#1304646</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-8" date="1464868800">- Make other security types work
  Resolves: bz#1341969</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-9" date="1473768000">- Force DT_RUNPATH to point to Mesa's libGL
  Resolves: bz#1326867</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-1" date="1487678400">- Update to 1.7.1
  Resolves: bz#1388620
  Resolves: bz#1343899
  Resolves: bz#1410164
  Resolves: bz#1415547
  Resolves: bz#1418945
  Resolves: bz#1416290
  Resolves: bz#1342956
- Fix shared memory leakage
  Resolves: bz#1358090
- Added systemd unit file for xvnc
  Resolves: bz#1393971</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-2" date="1491393600">- Be more restrictive with shared memory mode bits
  Resolves: bz#1152552
  Limit max username/password size in SSecurityPlain [CVE-2017-7394]
  Resolves: bz#1438737
  Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
  Resolves: bz#1438742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-3" date="1491393601">- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
  Resolves: bz#1439127
  Prevent double free by crafted fences [CVE-2017-7393]
  Resolves: bz#1439134</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-1" date="1492689600">- Update to 1.7.90
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-2" date="1493726400">- Make RandR callbacks optional
  Resolves: bz#1444948</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-1" date="1495022400">- Update to 1.8.0
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-2" date="1507809600">- Make TLS work on FIPS systems
  Resolves: bz#1501165</changelog>
</package>
<package pkgid="30ad7cee4a23b42ad3c21632c27f533dfece6a84935b0594df9d0e15b0dd35d1" name="tigervnc-server-module" arch="i686">
  <version epoch="0" ver="1.8.0" rel="2.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-7" date="1464177600">- Restore default behaviour to listen on TCP
  Resolves: bz#1304646</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-8" date="1464868800">- Make other security types work
  Resolves: bz#1341969</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-9" date="1473768000">- Force DT_RUNPATH to point to Mesa's libGL
  Resolves: bz#1326867</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-1" date="1487678400">- Update to 1.7.1
  Resolves: bz#1388620
  Resolves: bz#1343899
  Resolves: bz#1410164
  Resolves: bz#1415547
  Resolves: bz#1418945
  Resolves: bz#1416290
  Resolves: bz#1342956
- Fix shared memory leakage
  Resolves: bz#1358090
- Added systemd unit file for xvnc
  Resolves: bz#1393971</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-2" date="1491393600">- Be more restrictive with shared memory mode bits
  Resolves: bz#1152552
  Limit max username/password size in SSecurityPlain [CVE-2017-7394]
  Resolves: bz#1438737
  Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
  Resolves: bz#1438742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-3" date="1491393601">- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
  Resolves: bz#1439127
  Prevent double free by crafted fences [CVE-2017-7393]
  Resolves: bz#1439134</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-1" date="1492689600">- Update to 1.7.90
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-2" date="1493726400">- Make RandR callbacks optional
  Resolves: bz#1444948</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-1" date="1495022400">- Update to 1.8.0
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-2" date="1507809600">- Make TLS work on FIPS systems
  Resolves: bz#1501165</changelog>
</package>
<package pkgid="890c4850462ac0c60fb556f1e7e5fcec80757ad619d54f5cf0cbbed020e8d2eb" name="tigervnc-server-module" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="2.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-7" date="1464177600">- Restore default behaviour to listen on TCP
  Resolves: bz#1304646</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-8" date="1464868800">- Make other security types work
  Resolves: bz#1341969</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-9" date="1473768000">- Force DT_RUNPATH to point to Mesa's libGL
  Resolves: bz#1326867</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-1" date="1487678400">- Update to 1.7.1
  Resolves: bz#1388620
  Resolves: bz#1343899
  Resolves: bz#1410164
  Resolves: bz#1415547
  Resolves: bz#1418945
  Resolves: bz#1416290
  Resolves: bz#1342956
- Fix shared memory leakage
  Resolves: bz#1358090
- Added systemd unit file for xvnc
  Resolves: bz#1393971</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-2" date="1491393600">- Be more restrictive with shared memory mode bits
  Resolves: bz#1152552
  Limit max username/password size in SSecurityPlain [CVE-2017-7394]
  Resolves: bz#1438737
  Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
  Resolves: bz#1438742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-3" date="1491393601">- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
  Resolves: bz#1439127
  Prevent double free by crafted fences [CVE-2017-7393]
  Resolves: bz#1439134</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-1" date="1492689600">- Update to 1.7.90
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-2" date="1493726400">- Make RandR callbacks optional
  Resolves: bz#1444948</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-1" date="1495022400">- Update to 1.8.0
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-2" date="1507809600">- Make TLS work on FIPS systems
  Resolves: bz#1501165</changelog>
</package>
<package pkgid="ab6a1fdaf11a83f6557bf9a5e8bdb26ae9fc7a04732e8a403723066a4ec2ba5d" name="time" arch="i686">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="d0598321f5a5e61879551360b2196bffddc82942f179a179b01ccd8f520dc8ef" name="time" arch="i686">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="33240fd1de2dda315c87076e57ef756c2b3468b76c424679881555e2c0372d08" name="time" arch="i686">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="c07e3120dcb30e63c043f3d94f7ab5fed99b515ff55ca562e082da533fe073a6" name="time" arch="i686">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="e9d3b874d8848a53aecb710399405ab71d597b8b708fd7ee1d31dbf7e23322f6" name="time" arch="i686">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="8822c63e19010ffe8809b216aacdc745cd1a51e804dae69d35be737caaca25ab" name="time" arch="src">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="cec85e1792a343a128d572be4d1b5e62069984b8e7b06988bf627df3e4d29051" name="time" arch="src">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="09c56bd50228d349f102a7ed8eedfb9539604463ed9d988d7f0ba2a2ada6b9c3" name="time" arch="src">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="1d5d1d6bd8ec6e913d6438c4b4900da8e96b32b3669799afa3ddec2164107e76" name="time" arch="src">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="2c3a91d70d0aabc887efd87b45fa8527bffc8fce66c44fbe20802cd71c5d8896" name="time" arch="src">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="4cb966957d5604c2e892d14ce8b29019563355447d972235aa513d1f91448090" name="time" arch="src">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="d83b81e2cd9f34b1ce4e9626fa5f8400e69096439da0249e1aab4fda329b11a0" name="time" arch="src">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="12cfbb113fb9828ed076cfb6265de4a3731dc9e6eba3916fe2bd75cb638eb175" name="time" arch="src">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="2d8fb17550e40ca66d201ad07d44efa058f567de9b0ff5b45ba44dcbc7e6cc8e" name="time" arch="src">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="12c57fc88f930ad5418218411b4ca2a0dc3bccf14cc83cdfd89b24ccb1318150" name="time" arch="src">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="b0cadc0928d01affe8906677d8bc381929ab5573ec539a2cc8b3652917769f44" name="time" arch="x86_64">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="79445209f01ff8df300d2b9047047f0a9756a2bb389d12b5aae1649a6d17769b" name="time" arch="x86_64">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="9d4344c8794fb9571e6f04a8215541e3cea0667fbfbf150bd935ddf977d30b13" name="time" arch="x86_64">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="4fe47ec3a73175dc168a7b8a089938aeefdc77300bfbedf7117df1938278d768" name="time" arch="x86_64">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="7a2c1d720cebd767cc056740d4bcd7b999e9998863775e10c3769bda28f5c28d" name="time" arch="x86_64">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="51bfa28463545dddcf652ed808cde8b66a4bd594a6fa59108e1eeca7f2828164" name="time-debuginfo" arch="i686">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="f47c8b3c78fc2e5e0967d581582c592a696982aa8499db5c6dc55163b75694a4" name="time-debuginfo" arch="i686">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="8572619d6ced4ef3ba3b598678827743237eb54260b15945fa49e969118cbf9c" name="time-debuginfo" arch="i686">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="a104a340f8cd8f60a0dc50986a5a12544e0a1106f7327a2d357a59d49313573a" name="time-debuginfo" arch="i686">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="8ac456e9432e15350f25eb3d8c084926f020fec5dcd2f3c9af30a63e9db05df3" name="time-debuginfo" arch="i686">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="34916f0ce88bf6ba4b277c392542b88b54c3aa9dc6f65eb62d9eaa6dc8c51e14" name="time-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="580fbaadacbd9a2d1e0c0499748df8bfa60fd94e212482c1f1dad6609a5ee0f3" name="time-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="3369dfa5408813448e0a98d67fe5338d0f9e7098133b3c0b1090093a3fd8c4f7" name="time-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="45d37b4de78d9ab5b227e2498de8c281040eb722744a1c219e44b2e05b62daf7" name="time-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="88541de19fc51ab2e81aa3fbba295d7ead1b3bbcffc99768837ff72eb8c9648e" name="time-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="3b4713d4bcc9ca1da53007460bdd64c88d0c62355efb92a80075f0cb58debfd7" name="tomcat" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="301fdf7bc7b9c914a8b8cba289026c5792f7ee31f8e2b39782f23b0146abe487" name="tomcat" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="1875dbd189560501e1a8c76ec1329767cc95d00a9cafcbeb82f906c1a95edc8b" name="tomcat" arch="src">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="9ec2ac27cfb47e0cd5d4718699474a8ab8a000c5beb9e7c3cf9e433c6c1093ca" name="tomcat" arch="src">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="7c024690f8dc7c175dd321047c65d11b981f924dd705643930a61f23a1d5d101" name="tomcat-admin-webapps" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="d9a85708f164ea9c795f14eac2faa3eab50f239051176f688d8f5082a4c29fe5" name="tomcat-admin-webapps" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="b14c61cc957b996f23e121559f3e32dad90d58844164f7d474fab1e8e41750cc" name="tomcat-docs-webapp" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="c4c1e205dfd9709a2ab09173c6d460fa5201d05eac6db2688ae82fe75c46c3c8" name="tomcat-docs-webapp" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="9f02a75793d9f2845edc6dd91b6a20c8981722fd5a29e47a86b294df307db2f4" name="tomcat-el-2.2-api" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="5f42a29596ff50e4d21e9ac92c2022901097c9b7f5cf885fe079110e6f4deda3" name="tomcat-el-2.2-api" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="209561f69fb0ae13065deeb52706818d19550c31335202efba9104e2c7b00ca4" name="tomcat-javadoc" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="ea0d23dff3413ca59fe5667f9851b14670a470d0fadabb4dda6c8aa6e321b714" name="tomcat-javadoc" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="2a173cb127356462fe9663e3330bc814ae24efac855d0afc253694a9addcfa9c" name="tomcat-jsp-2.2-api" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="a5429bc0a2499d9bb23f559f2dd2c2804049d725e2fa90f38e3d731a46341970" name="tomcat-jsp-2.2-api" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="f38b9f9f830ddef0b3a04c2bf3c9723bdd32b59ea8a0a45c00819a8ad671ed5e" name="tomcat-jsvc" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="e3b4f7e6e4b88b6b8d40274a33a10b96429fee491616a53989443e271d6f6a32" name="tomcat-jsvc" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="e057b524f1da4026fff6d4b5651098e937002d1cdc77b9de70274a0b412d3374" name="tomcat-lib" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="45a24b890a5e3638a3f10669377201a221504025074aa25d7f16a08aedc1a9dc" name="tomcat-lib" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="7d985a740d8f3e8054eb92118be3d52f8e9c939a3ab760451f5aa3871f723841" name="tomcat-servlet-3.0-api" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="5f25b00b8a4c7f59bfae3af9914eedc2e4861501e8109de243c4907409ff67a8" name="tomcat-servlet-3.0-api" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="660f9d0b51194b89dae83e42c3a255b1548504c10619bcec67e7a9f60a5efdcc" name="tomcat-webapps" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="a5457f5a30c7a260f67d7a49c8bfd96ec2f9b1bbc8b6225c099e88432f9859f1" name="tomcat-webapps" arch="noarch">
  <version epoch="0" ver="7.0.76" rel="3.el7_4"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-3" date="1466164800">- Resolves: rhbz#1347774 The security manager doesn't work correctly (JSPs cannot be compiled)</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-4" date="1467028800">- Resolves: rhbz#1350438 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-5" date="1467374400">- Resolves: rhbz#1347860 The systemd service unit does not allow tomcat to shut down gracefully</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-6" date="1467979200">- Related: rhbz#1201409 Added /etc/sysconfig/tomcat to the systemd unit for tomcat-jsvc.service</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-7" date="1470225600">- Resolves: rhbz#1362545</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-9" date="1471953600">- Resolves: rhbz#1362213 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.69-10" date="1472126400">- Related: rhbz#1368122</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 0:7.0.76-1" date="1490788800">- Resolves: rhbz#1414895 Rebase tomcat to the current release</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-2" date="1496923200">- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism
- Resolves: rhbz#1441481 CVE-2017-5647 tomcat: Incorrect handling of pipelined requests when send file was used</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-3" date="1507809600">- Resolves: rhbz#1498344 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws
- Resolves: rhbz#1495654 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning
- Resolves: rhbz#1470596 CVE-2017-5647 Add follow up revision</changelog>
</package>
<package pkgid="7c703cd91cdd6a0b3e160e38e8fd00f5a0bc02beefdd695ed4fe1fb5c23a7b9a" name="totem" arch="i686">
  <version epoch="1" ver="3.22.1" rel="1.el7.0.1"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.8.2-5" date="1390996800">- Remove opensubtitles plugin, and PyXDG dependency
Resolves: #1058201</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1:3.14.2-1" date="1427112000">- Update to 3.14.2
- Resolves: #1174589</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.3-1" date="1431000000">- Update to 3.14.3
- Re-add opensubtitles plugin, as it doesn't depend on PyXDG anymore
Resolves: #1174589</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.14.3-2" date="1435320000">- Add totem.desktop to keep user mime associates working
Related: #1174589 1235413</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.3-3" date="1441368000">- Update YouTube API key
Resolves: #1258511</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.3-4" date="1441800000">- Remove Python3 plugins, they're mostly accessory plugins,
  and RHEL 7.2 only support Python2 for now
Resolves: #1259643</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.14.3-5" date="1443009600">- Add more goo to the compat desktop file to prevent them
  from exposing in control-center
Related: #1259292</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.14.3-6" date="1467288000">- Update translations
Resolves: #1273060</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.22.1-1" date="1488542400">+ totem-3.22.1-1
- Update to 3.22.1
Resolves: #1387048, #1412335</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 3.22.1-1.0.1" date="1512993600">- rebuild due to dymanic linking</changelog>
</package>
<package pkgid="d0948de38c0fc6c5e4dcf5bba5180992614a2d9ca197a246d21a7fbf371c1f7f" name="totem" arch="src">
  <version epoch="1" ver="3.22.1" rel="1.el7.0.1"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.8.2-5" date="1390996800">- Remove opensubtitles plugin, and PyXDG dependency
Resolves: #1058201</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1:3.14.2-1" date="1427112000">- Update to 3.14.2
- Resolves: #1174589</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.3-1" date="1431000000">- Update to 3.14.3
- Re-add opensubtitles plugin, as it doesn't depend on PyXDG anymore
Resolves: #1174589</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.14.3-2" date="1435320000">- Add totem.desktop to keep user mime associates working
Related: #1174589 1235413</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.3-3" date="1441368000">- Update YouTube API key
Resolves: #1258511</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.3-4" date="1441800000">- Remove Python3 plugins, they're mostly accessory plugins,
  and RHEL 7.2 only support Python2 for now
Resolves: #1259643</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.14.3-5" date="1443009600">- Add more goo to the compat desktop file to prevent them
  from exposing in control-center
Related: #1259292</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.14.3-6" date="1467288000">- Update translations
Resolves: #1273060</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.22.1-1" date="1488542400">+ totem-3.22.1-1
- Update to 3.22.1
Resolves: #1387048, #1412335</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 3.22.1-1.0.1" date="1512993600">- rebuild due to dymanic linking</changelog>
</package>
<package pkgid="0d7ae6459faae855db4bbb335a7c7475bd7542be299efc3b179d65f552f85af7" name="totem" arch="src">
  <version epoch="1" ver="3.22.1" rel="1.el7.0.1"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.8.2-5" date="1390996800">- Remove opensubtitles plugin, and PyXDG dependency
Resolves: #1058201</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1:3.14.2-1" date="1427112000">- Update to 3.14.2
- Resolves: #1174589</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.3-1" date="1431000000">- Update to 3.14.3
- Re-add opensubtitles plugin, as it doesn't depend on PyXDG anymore
Resolves: #1174589</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.14.3-2" date="1435320000">- Add totem.desktop to keep user mime associates working
Related: #1174589 1235413</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.3-3" date="1441368000">- Update YouTube API key
Resolves: #1258511</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.3-4" date="1441800000">- Remove Python3 plugins, they're mostly accessory plugins,
  and RHEL 7.2 only support Python2 for now
Resolves: #1259643</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.14.3-5" date="1443009600">- Add more goo to the compat desktop file to prevent them
  from exposing in control-center
Related: #1259292</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.14.3-6" date="1467288000">- Update translations
Resolves: #1273060</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.22.1-1" date="1488542400">+ totem-3.22.1-1
- Update to 3.22.1
Resolves: #1387048, #1412335</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 3.22.1-1.0.1" date="1512993600">- rebuild due to dymanic linking</changelog>
</package>
<package pkgid="1a1c359f3d5c401c510deaf45ab89fa3f3464fee88210c868d13cccc61ef60f4" name="totem" arch="x86_64">
  <version epoch="1" ver="3.22.1" rel="1.el7.0.1"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.8.2-5" date="1390996800">- Remove opensubtitles plugin, and PyXDG dependency
Resolves: #1058201</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1:3.14.2-1" date="1427112000">- Update to 3.14.2
- Resolves: #1174589</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.3-1" date="1431000000">- Update to 3.14.3
- Re-add opensubtitles plugin, as it doesn't depend on PyXDG anymore
Resolves: #1174589</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.14.3-2" date="1435320000">- Add totem.desktop to keep user mime associates working
Related: #1174589 1235413</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.3-3" date="1441368000">- Update YouTube API key
Resolves: #1258511</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.3-4" date="1441800000">- Remove Python3 plugins, they're mostly accessory plugins,
  and RHEL 7.2 only support Python2 for now
Resolves: #1259643</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.14.3-5" date="1443009600">- Add more goo to the compat desktop file to prevent them
  from exposing in control-center
Related: #1259292</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.14.3-6" date="1467288000">- Update translations
Resolves: #1273060</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.22.1-1" date="1488542400">+ totem-3.22.1-1
- Update to 3.22.1
Resolves: #1387048, #1412335</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 3.22.1-1.0.1" date="1512993600">- rebuild due to dymanic linking</changelog>
</package>
<package pkgid="15886484d76a26b5ff3fba64a0a174f00f2aa4c272fca13e1fc844b3cbcb5a10" name="totem-debuginfo" arch="i686">
  <version epoch="1" ver="3.22.1" rel="1.el7.0.1"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.8.2-5" date="1390996800">- Remove opensubtitles plugin, and PyXDG dependency
Resolves: #1058201</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1:3.14.2-1" date="1427112000">- Update to 3.14.2
- Resolves: #1174589</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.3-1" date="1431000000">- Update to 3.14.3
- Re-add opensubtitles plugin, as it doesn't depend on PyXDG anymore
Resolves: #1174589</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.14.3-2" date="1435320000">- Add totem.desktop to keep user mime associates working
Related: #1174589 1235413</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.3-3" date="1441368000">- Update YouTube API key
Resolves: #1258511</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.3-4" date="1441800000">- Remove Python3 plugins, they're mostly accessory plugins,
  and RHEL 7.2 only support Python2 for now
Resolves: #1259643</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.14.3-5" date="1443009600">- Add more goo to the compat desktop file to prevent them
  from exposing in control-center
Related: #1259292</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.14.3-6" date="1467288000">- Update translations
Resolves: #1273060</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.22.1-1" date="1488542400">+ totem-3.22.1-1
- Update to 3.22.1
Resolves: #1387048, #1412335</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 3.22.1-1.0.1" date="1512993600">- rebuild due to dymanic linking</changelog>
</package>
<package pkgid="a6f26bc48ed2a24873f45274602898315c3bbcb3b15276b3443dab8943cc00bb" name="totem-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.22.1" rel="1.el7.0.1"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.8.2-5" date="1390996800">- Remove opensubtitles plugin, and PyXDG dependency
Resolves: #1058201</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1:3.14.2-1" date="1427112000">- Update to 3.14.2
- Resolves: #1174589</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.3-1" date="1431000000">- Update to 3.14.3
- Re-add opensubtitles plugin, as it doesn't depend on PyXDG anymore
Resolves: #1174589</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.14.3-2" date="1435320000">- Add totem.desktop to keep user mime associates working
Related: #1174589 1235413</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.3-3" date="1441368000">- Update YouTube API key
Resolves: #1258511</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.3-4" date="1441800000">- Remove Python3 plugins, they're mostly accessory plugins,
  and RHEL 7.2 only support Python2 for now
Resolves: #1259643</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.14.3-5" date="1443009600">- Add more goo to the compat desktop file to prevent them
  from exposing in control-center
Related: #1259292</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.14.3-6" date="1467288000">- Update translations
Resolves: #1273060</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.22.1-1" date="1488542400">+ totem-3.22.1-1
- Update to 3.22.1
Resolves: #1387048, #1412335</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 3.22.1-1.0.1" date="1512993600">- rebuild due to dymanic linking</changelog>
</package>
<package pkgid="414bf97a43ad8e7afd7e40e320163c65631355ca930e22a714e468de0db979d9" name="totem-devel" arch="i686">
  <version epoch="1" ver="3.22.1" rel="1.el7.0.1"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.8.2-5" date="1390996800">- Remove opensubtitles plugin, and PyXDG dependency
Resolves: #1058201</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1:3.14.2-1" date="1427112000">- Update to 3.14.2
- Resolves: #1174589</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.3-1" date="1431000000">- Update to 3.14.3
- Re-add opensubtitles plugin, as it doesn't depend on PyXDG anymore
Resolves: #1174589</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.14.3-2" date="1435320000">- Add totem.desktop to keep user mime associates working
Related: #1174589 1235413</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.3-3" date="1441368000">- Update YouTube API key
Resolves: #1258511</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.3-4" date="1441800000">- Remove Python3 plugins, they're mostly accessory plugins,
  and RHEL 7.2 only support Python2 for now
Resolves: #1259643</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.14.3-5" date="1443009600">- Add more goo to the compat desktop file to prevent them
  from exposing in control-center
Related: #1259292</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.14.3-6" date="1467288000">- Update translations
Resolves: #1273060</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.22.1-1" date="1488542400">+ totem-3.22.1-1
- Update to 3.22.1
Resolves: #1387048, #1412335</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 3.22.1-1.0.1" date="1512993600">- rebuild due to dymanic linking</changelog>
</package>
<package pkgid="664d540e3be9a2540ea6e787a4522f5334544fe0eee238171a23380d50219123" name="totem-devel" arch="x86_64">
  <version epoch="1" ver="3.22.1" rel="1.el7.0.1"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.8.2-5" date="1390996800">- Remove opensubtitles plugin, and PyXDG dependency
Resolves: #1058201</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1:3.14.2-1" date="1427112000">- Update to 3.14.2
- Resolves: #1174589</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.3-1" date="1431000000">- Update to 3.14.3
- Re-add opensubtitles plugin, as it doesn't depend on PyXDG anymore
Resolves: #1174589</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.14.3-2" date="1435320000">- Add totem.desktop to keep user mime associates working
Related: #1174589 1235413</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.3-3" date="1441368000">- Update YouTube API key
Resolves: #1258511</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.3-4" date="1441800000">- Remove Python3 plugins, they're mostly accessory plugins,
  and RHEL 7.2 only support Python2 for now
Resolves: #1259643</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.14.3-5" date="1443009600">- Add more goo to the compat desktop file to prevent them
  from exposing in control-center
Related: #1259292</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.14.3-6" date="1467288000">- Update translations
Resolves: #1273060</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.22.1-1" date="1488542400">+ totem-3.22.1-1
- Update to 3.22.1
Resolves: #1387048, #1412335</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 3.22.1-1.0.1" date="1512993600">- rebuild due to dymanic linking</changelog>
</package>
<package pkgid="673749ef4d55628270eb4c5c7d0ad9a67bbffe993b386589345774328900dcd5" name="totem-nautilus" arch="i686">
  <version epoch="1" ver="3.22.1" rel="1.el7.0.1"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.8.2-5" date="1390996800">- Remove opensubtitles plugin, and PyXDG dependency
Resolves: #1058201</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1:3.14.2-1" date="1427112000">- Update to 3.14.2
- Resolves: #1174589</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.3-1" date="1431000000">- Update to 3.14.3
- Re-add opensubtitles plugin, as it doesn't depend on PyXDG anymore
Resolves: #1174589</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.14.3-2" date="1435320000">- Add totem.desktop to keep user mime associates working
Related: #1174589 1235413</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.3-3" date="1441368000">- Update YouTube API key
Resolves: #1258511</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.3-4" date="1441800000">- Remove Python3 plugins, they're mostly accessory plugins,
  and RHEL 7.2 only support Python2 for now
Resolves: #1259643</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.14.3-5" date="1443009600">- Add more goo to the compat desktop file to prevent them
  from exposing in control-center
Related: #1259292</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.14.3-6" date="1467288000">- Update translations
Resolves: #1273060</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.22.1-1" date="1488542400">+ totem-3.22.1-1
- Update to 3.22.1
Resolves: #1387048, #1412335</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 3.22.1-1.0.1" date="1512993600">- rebuild due to dymanic linking</changelog>
</package>
<package pkgid="61ea8713bcb9ff87f5c604421e1156dfa910ca991488d15f1a3d0728556724ac" name="totem-nautilus" arch="x86_64">
  <version epoch="1" ver="3.22.1" rel="1.el7.0.1"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.8.2-5" date="1390996800">- Remove opensubtitles plugin, and PyXDG dependency
Resolves: #1058201</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1:3.14.2-1" date="1427112000">- Update to 3.14.2
- Resolves: #1174589</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.3-1" date="1431000000">- Update to 3.14.3
- Re-add opensubtitles plugin, as it doesn't depend on PyXDG anymore
Resolves: #1174589</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.14.3-2" date="1435320000">- Add totem.desktop to keep user mime associates working
Related: #1174589 1235413</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.3-3" date="1441368000">- Update YouTube API key
Resolves: #1258511</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.3-4" date="1441800000">- Remove Python3 plugins, they're mostly accessory plugins,
  and RHEL 7.2 only support Python2 for now
Resolves: #1259643</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.14.3-5" date="1443009600">- Add more goo to the compat desktop file to prevent them
  from exposing in control-center
Related: #1259292</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.14.3-6" date="1467288000">- Update translations
Resolves: #1273060</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.22.1-1" date="1488542400">+ totem-3.22.1-1
- Update to 3.22.1
Resolves: #1387048, #1412335</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 3.22.1-1.0.1" date="1512993600">- rebuild due to dymanic linking</changelog>
</package>
<package pkgid="b11c218d7af861079c917938149370ddda8f0833107eb413bda55ecd655d3ed0" name="tuned" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="2c36038d7c1dc91378cc06cd21c4ebad9fe50f6ec3c980009a3d9da9687b1b20" name="tuned" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="825bf2e45fcb65a98fce790df33ddf89ac9c81cec2a207d4ddf18635ac462808" name="tuned" arch="src">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="2a57b7f2506aa683e6854256561571ce687254b04c50d97718139fd90cd6aa99" name="tuned" arch="src">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="89f9e3c692969e3a424eba52630b48e43ec91c8c308125b78f37d9259c95ed7c" name="tuned-gtk" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="dc7e0fe35c12987417156572e5b7e13ac45b820993e95b240768e8e689a09379" name="tuned-gtk" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="b14555fea14cda4e40a389e14790ca2e29e552559779a30c2563f6609958f083" name="tuned-profiles-atomic" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="4d766b404e60d9481c8fc0f6c507b8650690b4b59f8c3118c1c1c01c79e3d3b2" name="tuned-profiles-atomic" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="0918d0ba6df7c9c2c509aceab22ee644bccf72d82c05eaffae8d831231e59172" name="tuned-profiles-compat" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="ca3a84000eeac1655b6a29d6989b8d537258cbf46cd6cc7fd2d4e9d127374d88" name="tuned-profiles-compat" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="edd6c4ad07e34aaa2725e8677b44a8ee3df56f70c326cc81ee2cecf26196b119" name="tuned-profiles-cpu-partitioning" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="5f688b799af2db79392404a9d0c75191cab8d01946f0a82a67e01c56af6c555d" name="tuned-profiles-cpu-partitioning" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="cf11865aa3e39d84562869eb599595384b7909da35f49789036d5abbea0a63c7" name="tuned-profiles-nfv" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="2970b8b5a3be5e194f5b4f9b7264cc732081267e0ad25f19b5d2d3510c8a4b3c" name="tuned-profiles-nfv" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="8504b594b0c2bae2896dadfcb6e029c1bc6278fce5cf3ad2350c85712cf285a2" name="tuned-profiles-nfv-guest" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="3ae3a70f85cfed03e0e7ca23120a97c5e31d0a5676a929db72e7b23a0f28b93b" name="tuned-profiles-nfv-guest" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="0808377e52c150315216c95b18e05bce643d3e8e186695a394f47e5f99ec89c0" name="tuned-profiles-nfv-host" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="91cd8e46e5d370c402506ca1d580b28615e79dfab012abf45e2cc58f3e90abb2" name="tuned-profiles-nfv-host" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="544fa4f74fc8cf285291ddce5327b5b971a9f6820309fcef90709b7814c67bb7" name="tuned-profiles-oracle" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="b9d66fcdc56270326c2421dd97d9f351a66d0c2cb2f851f1c81bc63a9f696af9" name="tuned-profiles-oracle" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="01fb41407ca0db310dce5e5dc4ccc3b67d3a09540ad5863cbe5ef14e96f53c6c" name="tuned-profiles-realtime" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="600ad52b82568ff45703d4adc014ebe46013c614a3c1aee2dd4024000aaa4f24" name="tuned-profiles-realtime" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="15b095b6f3017e222a4cdbad6d082bd6e22e0bc1eee1459a5cd3acbd5d271474" name="tuned-profiles-sap" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="aeb4bffc519c2065a8a6324a646c5b002fc4f1dc1777d24be1a8339afbb2996e" name="tuned-profiles-sap" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="75448a8b305746d9ecbe67f8ff768ff16af70e0acfd6aaf93274aa0b2c38837b" name="tuned-profiles-sap-hana" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="fd62c29673a8d83fa20df02df91c5964543fca95c9be8f31b007897f540b08d3" name="tuned-profiles-sap-hana" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="ec6850b806501620923bc85c8ef167de7451aafc88de5437cd6f8a7ef5771e12" name="tuned-utils" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="9e7f0a2f9ba012129eda1af7e1602746c5da6e4e1a3149b644666ee2019ac839" name="tuned-utils" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="c6f7cba3d6a33baec98dba4bc38110a00dfb1f0f687866f72f1ea493c12fee86" name="tuned-utils-systemtap" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="cecb92156af012e7bc64f2b07a53e9376459dda4d9929bcb6c6082b56bf9284c" name="tuned-utils-systemtap" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="5.el7_4.2"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-2" date="1470830400">- fixed Tuned restart from GUI
  resolves: rhbz#1365533</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.1" date="1508760000">- sap-hana: change force_latency to 70
  resolves: rhbz#1505166</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5.2" date="1509364800">- fixed profile application from cloud-init
  resolves: rhbz#1507564</changelog>
</package>
<package pkgid="9ad8a82854a719d5f60cb29d4cedb1d32210434a38a26796c2a38442e36761cd" name="tzdata" arch="noarch">
  <version epoch="0" ver="2017c" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016f-2" date="1474372800">- Interim builds to add support for leap second.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.prerelease" date="1474891200">- Rebase to prerelease version of tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07. 
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.20160927.prerelease" date="1474977600">- Change the Release to 1.20160927_prerelease.dist.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
</package>
<package pkgid="150b45e119d61162b332c8508ddf949114026fbf4753e4a84393e165932bd663" name="tzdata" arch="noarch">
  <version epoch="0" ver="2017c" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016f-2" date="1474372800">- Interim builds to add support for leap second.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.prerelease" date="1474891200">- Rebase to prerelease version of tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07. 
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.20160927.prerelease" date="1474977600">- Change the Release to 1.20160927_prerelease.dist.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
</package>
<package pkgid="6574084378ea9edbe4677995af38ace08d3a829c593273e7330ec377e769f0ae" name="tzdata" arch="src">
  <version epoch="0" ver="2017c" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016f-2" date="1474372800">- Interim builds to add support for leap second.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.prerelease" date="1474891200">- Rebase to prerelease version of tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07. 
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.20160927.prerelease" date="1474977600">- Change the Release to 1.20160927_prerelease.dist.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
</package>
<package pkgid="94a63cd4caca4d3c6a41e7ffa0df0b73103d4897092df639eaca2c0d0a32f20d" name="tzdata" arch="src">
  <version epoch="0" ver="2017c" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016f-2" date="1474372800">- Interim builds to add support for leap second.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.prerelease" date="1474891200">- Rebase to prerelease version of tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07. 
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.20160927.prerelease" date="1474977600">- Change the Release to 1.20160927_prerelease.dist.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
</package>
<package pkgid="c333ce8a35844eed6a682f3baa4c8cb894c8d767fedc0de2cc28b42a99f61184" name="tzdata" arch="noarch">
  <version epoch="0" ver="2018c" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.20160927.prerelease" date="1474977600">- Change the Release to 1.20160927_prerelease.dist.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
</package>
<package pkgid="d415f36cbf24a045a8fdea91a5cd944db1c836d05d05c637f654d6ee5b605aef" name="tzdata" arch="noarch">
  <version epoch="0" ver="2018c" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.20160927.prerelease" date="1474977600">- Change the Release to 1.20160927_prerelease.dist.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
</package>
<package pkgid="d0fc46ccd2cc5cf3ba188ab15c7de5261b51b6aec5f43c23de2ed028c2fe964f" name="tzdata" arch="src">
  <version epoch="0" ver="2018c" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.20160927.prerelease" date="1474977600">- Change the Release to 1.20160927_prerelease.dist.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
</package>
<package pkgid="437c68e70d67077b14c7c494e82c9677c3da67bf7456bc8ccb7c99d2434b74a8" name="tzdata" arch="src">
  <version epoch="0" ver="2018c" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.20160927.prerelease" date="1474977600">- Change the Release to 1.20160927_prerelease.dist.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
</package>
<package pkgid="5b50263509637488b4301146864418902cd18635b7b031f278eaf1b9d92200aa" name="tzdata" arch="noarch">
  <version epoch="0" ver="2018d" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
</package>
<package pkgid="122ac129ba222267b5a5a21fe69d67722f30d271842f618ac3171cc2f2b856e9" name="tzdata" arch="noarch">
  <version epoch="0" ver="2018d" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
</package>
<package pkgid="a7eb042ec787e1007f5a527250a6567103803ae13d109f559d9d70eb7a47aa1b" name="tzdata" arch="src">
  <version epoch="0" ver="2018d" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
</package>
<package pkgid="2d21cd8523a77a343b12678805a8381555e677620809f2a41db3b64a39e1a34f" name="tzdata" arch="src">
  <version epoch="0" ver="2018d" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
</package>
<package pkgid="25ddcbe3c4d3ec900172246dd55b75742dd250898b532f0e4ce9123ad61ca734" name="tzdata" arch="noarch">
  <version epoch="0" ver="2018e" rel="3.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
</package>
<package pkgid="41db7ba38be1a3c313ea0594fe9e9ca5fcf67461f30d8e22b756089e72616b5d" name="tzdata" arch="noarch">
  <version epoch="0" ver="2018e" rel="3.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
</package>
<package pkgid="21b7c59e9a9367834393978106324505df1dc69b323aa24594954d10a18f1a06" name="tzdata" arch="src">
  <version epoch="0" ver="2018e" rel="3.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
</package>
<package pkgid="5fc282597d09e49299df3d1ad17b76b9e8238740039d31687bb4cdbb4bb5a0ad" name="tzdata" arch="src">
  <version epoch="0" ver="2018e" rel="3.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
</package>
<package pkgid="1a9f88812780ddc1f652fae9378e555bcd63d61ca3ebb89ed9c8521a7ff167d0" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2017c" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016f-2" date="1474372800">- Interim builds to add support for leap second.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.prerelease" date="1474891200">- Rebase to prerelease version of tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07. 
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.20160927.prerelease" date="1474977600">- Change the Release to 1.20160927_prerelease.dist.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
</package>
<package pkgid="9331687a02e28c7f890df46d184150d2c186b48498ba494e5272e9a7d173aa45" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2017c" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016f-2" date="1474372800">- Interim builds to add support for leap second.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.prerelease" date="1474891200">- Rebase to prerelease version of tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07. 
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.20160927.prerelease" date="1474977600">- Change the Release to 1.20160927_prerelease.dist.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
</package>
<package pkgid="dbaa063da4a79a359be0bd4b8fb2c8c07f2e7d0c6b157f4d4eb08e73b431168f" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2018c" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.20160927.prerelease" date="1474977600">- Change the Release to 1.20160927_prerelease.dist.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
</package>
<package pkgid="10ebfd549c9daf1a6b4524d5eff5b1738a53bde4a93a98fafb993c83d757aa35" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2018c" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.20160927.prerelease" date="1474977600">- Change the Release to 1.20160927_prerelease.dist.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
</package>
<package pkgid="ac01e28f9c3373b0bd140f6c5e3783d77c240c7b8344d1bbea0af7962c845f31" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2018d" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
</package>
<package pkgid="be7b11c97c310881bf3c0dedf63dc8d37aa1df2680e482a275ea01e852036ad4" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2018d" rel="1.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
</package>
<package pkgid="4c8b7c3439fecb7192b8ba0cb7e3406eb2fe9695dc1ec0524d950976b7582914" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2018e" rel="3.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
</package>
<package pkgid="a7722c0ebe906e93afa1b45b70999fcb64f639c099db96ef5a885e9707f011cc" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2018e" rel="3.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
</package>
<package pkgid="aaa921dae3d27e0978c56761bfdcd3e89bc8e4824eddfe20515458cf8e183a2e" name="util-linux" arch="i686">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="0d061a7ab6e1da2bdfd8f5a952ce4d707468264329a5e8f059a3d9c7fb671c1a" name="util-linux" arch="src">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="0cba92777aa7272e21207c06fabb577456e82defac5eedbfa96e5173329cfa15" name="util-linux" arch="src">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="aeea6777305f7ba1595aa5b5f7f0c274e2589f7feda68e2a5e2e2dd40974e4d1" name="util-linux" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="0a621919605f87647fad8472c335718663fb97687884f254121dd4b2fb02c58a" name="util-linux-debuginfo" arch="i686">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="e381c9cf2bf9cff3a2bbe5b2c1d5fe417d75b4cee6ee705e5c0118aa760577f8" name="util-linux-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="415f50efa06bb87a65d43d2725ede8842da96752cb867f7c8fc96655185b88a2" name="uuidd" arch="i686">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="baa70e27c6dcc5d8a8988b688d4f55676141854b8be4e155f8ebc5f77ddecbdb" name="uuidd" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="71a617b374be68474a4224acefc56e4719abad4916e3fcd8cee20640902870bf" name="valgrind" arch="i686">
  <version epoch="1" ver="3.12.0" rel="9.el7_4"/>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-15" date="1440676800">- Add valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-16" date="1440763200">- Patch both 32 and 64 in valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-20" date="1460721600">- Rebase to fedora 3.11.0
  (#1316512 #1306844 #1305962 #1298888 #1296318 #1271754 #1265566 #1265557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-21" date="1461931200">- Add valgrind-3.11.0-deduppoolalloc.patch (#1328347)
- Add valgrind-3.11.0-ppc-bcd-addsub.patch (#1331738)
- Add valgrind-3.11.0-ppc64-vgdb-vr-regs.patch (#1331774)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-22" date="1464609600">- Add valgrind-3.11.0-arm64-handle_at.patch
- Add valgrind-3.11.0-ppc64-syscalls.patch</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-23" date="1466510400">- Update valgrind-3.11.0-ppoll-mask.patch (#1347626)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-24" date="1469102400">- Add valgrind-3.11.0-pcmpxstrx-0x70-0x19.patch (#1354557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-7" date="1487419200">- Rebase to 3.12.0 fedora backports (#1391217, #1385006, #1368706, #1270889)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-8" date="1490702400">- Add valgrind-3.12.0-powerpc-register-pair.patch (#1437030)
- Add valgrind-3.12.0-ppc64-isa-3_00.patch (#1437032)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-9" date="1505995200">- Add valgrind-3.12.0-ll-sc-fallback[1234].patch (#1492753)</changelog>
</package>
<package pkgid="c5f44b830535d4596f76408434d249de3314bf2a8dc6a794a4a8cbae13ec1acd" name="valgrind" arch="src">
  <version epoch="1" ver="3.12.0" rel="9.el7_4"/>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-15" date="1440676800">- Add valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-16" date="1440763200">- Patch both 32 and 64 in valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-20" date="1460721600">- Rebase to fedora 3.11.0
  (#1316512 #1306844 #1305962 #1298888 #1296318 #1271754 #1265566 #1265557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-21" date="1461931200">- Add valgrind-3.11.0-deduppoolalloc.patch (#1328347)
- Add valgrind-3.11.0-ppc-bcd-addsub.patch (#1331738)
- Add valgrind-3.11.0-ppc64-vgdb-vr-regs.patch (#1331774)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-22" date="1464609600">- Add valgrind-3.11.0-arm64-handle_at.patch
- Add valgrind-3.11.0-ppc64-syscalls.patch</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-23" date="1466510400">- Update valgrind-3.11.0-ppoll-mask.patch (#1347626)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-24" date="1469102400">- Add valgrind-3.11.0-pcmpxstrx-0x70-0x19.patch (#1354557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-7" date="1487419200">- Rebase to 3.12.0 fedora backports (#1391217, #1385006, #1368706, #1270889)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-8" date="1490702400">- Add valgrind-3.12.0-powerpc-register-pair.patch (#1437030)
- Add valgrind-3.12.0-ppc64-isa-3_00.patch (#1437032)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-9" date="1505995200">- Add valgrind-3.12.0-ll-sc-fallback[1234].patch (#1492753)</changelog>
</package>
<package pkgid="7e937a09087ac5d04d54a1a22413184ac7024e4cf1758665b59af4f91c85cdfb" name="valgrind" arch="src">
  <version epoch="1" ver="3.12.0" rel="9.el7_4"/>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-15" date="1440676800">- Add valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-16" date="1440763200">- Patch both 32 and 64 in valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-20" date="1460721600">- Rebase to fedora 3.11.0
  (#1316512 #1306844 #1305962 #1298888 #1296318 #1271754 #1265566 #1265557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-21" date="1461931200">- Add valgrind-3.11.0-deduppoolalloc.patch (#1328347)
- Add valgrind-3.11.0-ppc-bcd-addsub.patch (#1331738)
- Add valgrind-3.11.0-ppc64-vgdb-vr-regs.patch (#1331774)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-22" date="1464609600">- Add valgrind-3.11.0-arm64-handle_at.patch
- Add valgrind-3.11.0-ppc64-syscalls.patch</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-23" date="1466510400">- Update valgrind-3.11.0-ppoll-mask.patch (#1347626)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-24" date="1469102400">- Add valgrind-3.11.0-pcmpxstrx-0x70-0x19.patch (#1354557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-7" date="1487419200">- Rebase to 3.12.0 fedora backports (#1391217, #1385006, #1368706, #1270889)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-8" date="1490702400">- Add valgrind-3.12.0-powerpc-register-pair.patch (#1437030)
- Add valgrind-3.12.0-ppc64-isa-3_00.patch (#1437032)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-9" date="1505995200">- Add valgrind-3.12.0-ll-sc-fallback[1234].patch (#1492753)</changelog>
</package>
<package pkgid="7246d920f06c8db653f44599b4c023d3ce0ab149a9d9cb2e7f103bcdb1bf749e" name="valgrind" arch="x86_64">
  <version epoch="1" ver="3.12.0" rel="9.el7_4"/>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-15" date="1440676800">- Add valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-16" date="1440763200">- Patch both 32 and 64 in valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-20" date="1460721600">- Rebase to fedora 3.11.0
  (#1316512 #1306844 #1305962 #1298888 #1296318 #1271754 #1265566 #1265557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-21" date="1461931200">- Add valgrind-3.11.0-deduppoolalloc.patch (#1328347)
- Add valgrind-3.11.0-ppc-bcd-addsub.patch (#1331738)
- Add valgrind-3.11.0-ppc64-vgdb-vr-regs.patch (#1331774)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-22" date="1464609600">- Add valgrind-3.11.0-arm64-handle_at.patch
- Add valgrind-3.11.0-ppc64-syscalls.patch</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-23" date="1466510400">- Update valgrind-3.11.0-ppoll-mask.patch (#1347626)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-24" date="1469102400">- Add valgrind-3.11.0-pcmpxstrx-0x70-0x19.patch (#1354557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-7" date="1487419200">- Rebase to 3.12.0 fedora backports (#1391217, #1385006, #1368706, #1270889)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-8" date="1490702400">- Add valgrind-3.12.0-powerpc-register-pair.patch (#1437030)
- Add valgrind-3.12.0-ppc64-isa-3_00.patch (#1437032)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-9" date="1505995200">- Add valgrind-3.12.0-ll-sc-fallback[1234].patch (#1492753)</changelog>
</package>
<package pkgid="4e12bd4efee9ec7a4235778df875201603f24c56c3c5e234db94e4fdea1ac709" name="valgrind-debuginfo" arch="i686">
  <version epoch="1" ver="3.12.0" rel="9.el7_4"/>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-15" date="1440676800">- Add valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-16" date="1440763200">- Patch both 32 and 64 in valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-20" date="1460721600">- Rebase to fedora 3.11.0
  (#1316512 #1306844 #1305962 #1298888 #1296318 #1271754 #1265566 #1265557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-21" date="1461931200">- Add valgrind-3.11.0-deduppoolalloc.patch (#1328347)
- Add valgrind-3.11.0-ppc-bcd-addsub.patch (#1331738)
- Add valgrind-3.11.0-ppc64-vgdb-vr-regs.patch (#1331774)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-22" date="1464609600">- Add valgrind-3.11.0-arm64-handle_at.patch
- Add valgrind-3.11.0-ppc64-syscalls.patch</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-23" date="1466510400">- Update valgrind-3.11.0-ppoll-mask.patch (#1347626)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-24" date="1469102400">- Add valgrind-3.11.0-pcmpxstrx-0x70-0x19.patch (#1354557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-7" date="1487419200">- Rebase to 3.12.0 fedora backports (#1391217, #1385006, #1368706, #1270889)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-8" date="1490702400">- Add valgrind-3.12.0-powerpc-register-pair.patch (#1437030)
- Add valgrind-3.12.0-ppc64-isa-3_00.patch (#1437032)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-9" date="1505995200">- Add valgrind-3.12.0-ll-sc-fallback[1234].patch (#1492753)</changelog>
</package>
<package pkgid="b0ece7d2572b63fd333190c13364cec8d4b4fb5a11a63aa5461cb91737eee2b9" name="valgrind-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.12.0" rel="9.el7_4"/>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-15" date="1440676800">- Add valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-16" date="1440763200">- Patch both 32 and 64 in valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-20" date="1460721600">- Rebase to fedora 3.11.0
  (#1316512 #1306844 #1305962 #1298888 #1296318 #1271754 #1265566 #1265557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-21" date="1461931200">- Add valgrind-3.11.0-deduppoolalloc.patch (#1328347)
- Add valgrind-3.11.0-ppc-bcd-addsub.patch (#1331738)
- Add valgrind-3.11.0-ppc64-vgdb-vr-regs.patch (#1331774)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-22" date="1464609600">- Add valgrind-3.11.0-arm64-handle_at.patch
- Add valgrind-3.11.0-ppc64-syscalls.patch</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-23" date="1466510400">- Update valgrind-3.11.0-ppoll-mask.patch (#1347626)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-24" date="1469102400">- Add valgrind-3.11.0-pcmpxstrx-0x70-0x19.patch (#1354557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-7" date="1487419200">- Rebase to 3.12.0 fedora backports (#1391217, #1385006, #1368706, #1270889)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-8" date="1490702400">- Add valgrind-3.12.0-powerpc-register-pair.patch (#1437030)
- Add valgrind-3.12.0-ppc64-isa-3_00.patch (#1437032)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-9" date="1505995200">- Add valgrind-3.12.0-ll-sc-fallback[1234].patch (#1492753)</changelog>
</package>
<package pkgid="9ab1cfbf60d15c38e63f8ddb761222342db0d484376774e19f941d5f83d39ff6" name="valgrind-devel" arch="i686">
  <version epoch="1" ver="3.12.0" rel="9.el7_4"/>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-15" date="1440676800">- Add valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-16" date="1440763200">- Patch both 32 and 64 in valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-20" date="1460721600">- Rebase to fedora 3.11.0
  (#1316512 #1306844 #1305962 #1298888 #1296318 #1271754 #1265566 #1265557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-21" date="1461931200">- Add valgrind-3.11.0-deduppoolalloc.patch (#1328347)
- Add valgrind-3.11.0-ppc-bcd-addsub.patch (#1331738)
- Add valgrind-3.11.0-ppc64-vgdb-vr-regs.patch (#1331774)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-22" date="1464609600">- Add valgrind-3.11.0-arm64-handle_at.patch
- Add valgrind-3.11.0-ppc64-syscalls.patch</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-23" date="1466510400">- Update valgrind-3.11.0-ppoll-mask.patch (#1347626)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-24" date="1469102400">- Add valgrind-3.11.0-pcmpxstrx-0x70-0x19.patch (#1354557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-7" date="1487419200">- Rebase to 3.12.0 fedora backports (#1391217, #1385006, #1368706, #1270889)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-8" date="1490702400">- Add valgrind-3.12.0-powerpc-register-pair.patch (#1437030)
- Add valgrind-3.12.0-ppc64-isa-3_00.patch (#1437032)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-9" date="1505995200">- Add valgrind-3.12.0-ll-sc-fallback[1234].patch (#1492753)</changelog>
</package>
<package pkgid="0417f350ee13f36b366b07b2dc5e210d6df41daba0ee698737981392cb3ce904" name="valgrind-devel" arch="x86_64">
  <version epoch="1" ver="3.12.0" rel="9.el7_4"/>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-15" date="1440676800">- Add valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-16" date="1440763200">- Patch both 32 and 64 in valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-20" date="1460721600">- Rebase to fedora 3.11.0
  (#1316512 #1306844 #1305962 #1298888 #1296318 #1271754 #1265566 #1265557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-21" date="1461931200">- Add valgrind-3.11.0-deduppoolalloc.patch (#1328347)
- Add valgrind-3.11.0-ppc-bcd-addsub.patch (#1331738)
- Add valgrind-3.11.0-ppc64-vgdb-vr-regs.patch (#1331774)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-22" date="1464609600">- Add valgrind-3.11.0-arm64-handle_at.patch
- Add valgrind-3.11.0-ppc64-syscalls.patch</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-23" date="1466510400">- Update valgrind-3.11.0-ppoll-mask.patch (#1347626)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-24" date="1469102400">- Add valgrind-3.11.0-pcmpxstrx-0x70-0x19.patch (#1354557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-7" date="1487419200">- Rebase to 3.12.0 fedora backports (#1391217, #1385006, #1368706, #1270889)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-8" date="1490702400">- Add valgrind-3.12.0-powerpc-register-pair.patch (#1437030)
- Add valgrind-3.12.0-ppc64-isa-3_00.patch (#1437032)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-9" date="1505995200">- Add valgrind-3.12.0-ll-sc-fallback[1234].patch (#1492753)</changelog>
</package>
<package pkgid="ece9202d5d9f647b8a1ecbcb0faa4ec89a3bf122ee8dfabd006e7c244b3807df" name="valgrind-openmpi" arch="i686">
  <version epoch="1" ver="3.12.0" rel="9.el7_4"/>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-15" date="1440676800">- Add valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-16" date="1440763200">- Patch both 32 and 64 in valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-20" date="1460721600">- Rebase to fedora 3.11.0
  (#1316512 #1306844 #1305962 #1298888 #1296318 #1271754 #1265566 #1265557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-21" date="1461931200">- Add valgrind-3.11.0-deduppoolalloc.patch (#1328347)
- Add valgrind-3.11.0-ppc-bcd-addsub.patch (#1331738)
- Add valgrind-3.11.0-ppc64-vgdb-vr-regs.patch (#1331774)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-22" date="1464609600">- Add valgrind-3.11.0-arm64-handle_at.patch
- Add valgrind-3.11.0-ppc64-syscalls.patch</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-23" date="1466510400">- Update valgrind-3.11.0-ppoll-mask.patch (#1347626)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-24" date="1469102400">- Add valgrind-3.11.0-pcmpxstrx-0x70-0x19.patch (#1354557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-7" date="1487419200">- Rebase to 3.12.0 fedora backports (#1391217, #1385006, #1368706, #1270889)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-8" date="1490702400">- Add valgrind-3.12.0-powerpc-register-pair.patch (#1437030)
- Add valgrind-3.12.0-ppc64-isa-3_00.patch (#1437032)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-9" date="1505995200">- Add valgrind-3.12.0-ll-sc-fallback[1234].patch (#1492753)</changelog>
</package>
<package pkgid="b5e0adf20fcc82d79fdffd0c6c3a9c1fa02b463e87040e036737b16cd89e43a7" name="valgrind-openmpi" arch="x86_64">
  <version epoch="1" ver="3.12.0" rel="9.el7_4"/>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-15" date="1440676800">- Add valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-16" date="1440763200">- Patch both 32 and 64 in valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-20" date="1460721600">- Rebase to fedora 3.11.0
  (#1316512 #1306844 #1305962 #1298888 #1296318 #1271754 #1265566 #1265557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-21" date="1461931200">- Add valgrind-3.11.0-deduppoolalloc.patch (#1328347)
- Add valgrind-3.11.0-ppc-bcd-addsub.patch (#1331738)
- Add valgrind-3.11.0-ppc64-vgdb-vr-regs.patch (#1331774)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-22" date="1464609600">- Add valgrind-3.11.0-arm64-handle_at.patch
- Add valgrind-3.11.0-ppc64-syscalls.patch</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-23" date="1466510400">- Update valgrind-3.11.0-ppoll-mask.patch (#1347626)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-24" date="1469102400">- Add valgrind-3.11.0-pcmpxstrx-0x70-0x19.patch (#1354557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-7" date="1487419200">- Rebase to 3.12.0 fedora backports (#1391217, #1385006, #1368706, #1270889)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-8" date="1490702400">- Add valgrind-3.12.0-powerpc-register-pair.patch (#1437030)
- Add valgrind-3.12.0-ppc64-isa-3_00.patch (#1437032)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-9" date="1505995200">- Add valgrind-3.12.0-ll-sc-fallback[1234].patch (#1492753)</changelog>
</package>
<package pkgid="bc07e621b97c5fad3dfa4d3d1276ee8724b173cc7af05c67fe5ea51434e99a53" name="veritysetup" arch="i686">
  <version epoch="0" ver="1.7.4" rel="3.el7_4.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.3-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-1" date="1410177600">- Update to cryptsetup 1.6.6.
- Resolves: #1117372 #1038097</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-2" date="1411992000">- patch: fix failures related to reencrypt log files
- Resolves: #1140199</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-3" date="1418904000">- drop FIPS power on self test and library checksum
- Resolves: #1158897</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.7-1" date="1434628800">- Update to cryptsetup 1.6.7.
- patch: avoid use of kernel crypto API socket which is known
  to be broken in RHEL7.0 kernel (7.1+ is fine).
- Resolves: #1206170</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.2-1" date="1465300800">- Update to cryptsetup 1.7.2.
- Resolves: #1302022 #1070825</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-1" date="1489579200">- Update to cryptsetup 1.7.4.
- Resolves: #1381273</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-2" date="1491307200">- patch: fix access to unaligned hidden TrueCrypt header.
- Resolves: #1435543</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3" date="1493121600">- patch: fix luksFormat failure while running in FIPS mode.
- Resolves: #1444137</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3.el7_4.1" date="1510833600">- patch: fix regression in blockwise functions (archs with 64 KiB
  page_size)
- Resolves: #1510841</changelog>
</package>
<package pkgid="5d51a13bc90560da973e290a0545cc6cd61ce8a7dbedf293d3294323b59c7847" name="veritysetup" arch="x86_64">
  <version epoch="0" ver="1.7.4" rel="3.el7_4.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.3-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-1" date="1410177600">- Update to cryptsetup 1.6.6.
- Resolves: #1117372 #1038097</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-2" date="1411992000">- patch: fix failures related to reencrypt log files
- Resolves: #1140199</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-3" date="1418904000">- drop FIPS power on self test and library checksum
- Resolves: #1158897</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.7-1" date="1434628800">- Update to cryptsetup 1.6.7.
- patch: avoid use of kernel crypto API socket which is known
  to be broken in RHEL7.0 kernel (7.1+ is fine).
- Resolves: #1206170</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.2-1" date="1465300800">- Update to cryptsetup 1.7.2.
- Resolves: #1302022 #1070825</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-1" date="1489579200">- Update to cryptsetup 1.7.4.
- Resolves: #1381273</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-2" date="1491307200">- patch: fix access to unaligned hidden TrueCrypt header.
- Resolves: #1435543</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3" date="1493121600">- patch: fix luksFormat failure while running in FIPS mode.
- Resolves: #1444137</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3.el7_4.1" date="1510833600">- patch: fix regression in blockwise functions (archs with 64 KiB
  page_size)
- Resolves: #1510841</changelog>
</package>
<package pkgid="8d52f00cec5af322635aec73407f0477558f7451fa11c1aa813ccac3660a91f8" name="virt-dib" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.50" date="1440936000">- v2v:
  * When debugging, dump OVF to stderr.
  * Ignore missing kernels from grub
    resolves: rhbz#1230412
  * Calculate VMware dcPath correctly (1256823)
  * Map empty VMware network or bridge name to default (1257895)
- p2v:
  * Wait for network to come online before testing connection
    resolves: rhbz#1256222
- Fix tests to run correctly with libguestfs-winsupport 7.2.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.51" date="1441108800">- v2v: Fix handling of extra slashes in dcPath calculation
  resolves: rhbz#1258342 rhbz#1256823
- v2v: Fix -oa preallocation option
  resolves: rhbz#1251909</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
</package>
<package pkgid="cbb975b661d3c82ec83420265ac6e7ccef689a06d3a94f8d25d791dac89ab9be" name="virt-dib" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="89da39a7b40adaeffa29791cb61ca19109849ba3dd59c0c410a51bde82e9b591" name="virt-p2v-maker" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.50" date="1440936000">- v2v:
  * When debugging, dump OVF to stderr.
  * Ignore missing kernels from grub
    resolves: rhbz#1230412
  * Calculate VMware dcPath correctly (1256823)
  * Map empty VMware network or bridge name to default (1257895)
- p2v:
  * Wait for network to come online before testing connection
    resolves: rhbz#1256222
- Fix tests to run correctly with libguestfs-winsupport 7.2.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.51" date="1441108800">- v2v: Fix handling of extra slashes in dcPath calculation
  resolves: rhbz#1258342 rhbz#1256823
- v2v: Fix -oa preallocation option
  resolves: rhbz#1251909</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
</package>
<package pkgid="41ca1e31966d61b8c3c912c46d7b0236d8b1d4e8590a3c3fb25c97f2d1bae364" name="virt-p2v-maker" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="f57ee64f9f723ea529fb4b037ed095e61b55c5556b519cda360ef057d662a86f" name="virt-v2v" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.50" date="1440936000">- v2v:
  * When debugging, dump OVF to stderr.
  * Ignore missing kernels from grub
    resolves: rhbz#1230412
  * Calculate VMware dcPath correctly (1256823)
  * Map empty VMware network or bridge name to default (1257895)
- p2v:
  * Wait for network to come online before testing connection
    resolves: rhbz#1256222
- Fix tests to run correctly with libguestfs-winsupport 7.2.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.51" date="1441108800">- v2v: Fix handling of extra slashes in dcPath calculation
  resolves: rhbz#1258342 rhbz#1256823
- v2v: Fix -oa preallocation option
  resolves: rhbz#1251909</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
</package>
<package pkgid="0c13ca31dd68c9957bcc998740af87428daa2673eb4ed1860904ef3abecf7933" name="virt-v2v" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="02186e39a3b3787a2853beff91b3ab96d0fba99e8b7747ca2d9a14a5a0643fdb" name="virt-who" arch="noarch">
  <version epoch="0" ver="0.19" rel="6.el7_4"/>
  <changelog author="Devan Goodwin &lt;dgoodwin@rm-rf.ca&gt; 0.15-1" date="1438689600">- Update spec for renamed README.md. (dgoodwin@redhat.com)
- Moves fakevirt._decode() to util.decode() (csnyder@redhat.com)
- Adds the report.config.name to log message when refusing to send a report due
  to lack of change (csnyder@redhat.com)
- VirtWho: Clears list of reports on reload (csnyder@redhat.com)
- Revises change detection tests to account for changes in master
  (csnyder@redhat.com)
- Libvirtd: Sends a report on start up, and on events (csnyder@redhat.com)
- Removes trailing line at the end of the file (csnyder@redhat.com)
- Test_Esx: Test Oneshot to ensure it queues a report (csnyder@redhat.com)
- Esx: only queue data if the version has changed (csnyder@redhat.com)
- Test_VirtWho:Patches manager.Manager.fromOptions, removes unnecessary mocks
  (csnyder@redhat.com)
- Removes unhelpful debug log message (csnyder@redhat.com)
- Fix spacing, remove unused imports (csnyder@redhat.com)
- Test_VirtWho: Adds test to show same report will not be sent twice
  (csnyder@redhat.com)
- VirtWho: Adds basic change detection using report hashs (csnyder@redhat.com)
- Adds hash property to config (csnyder@redhat.com)
- Adds hash property to DomainListReport and HypervisorGuestAssociationReport
  (csnyder@redhat.com)
- Hypervisor: Adds getHash class method (csnyder@redhat.com)
- Limits interval settings (wpoteat@redhat.com)
- Retry sending data to subscription manager multiple times before dropping
  (rnovacek@redhat.com)
- SubscriptionManager: nicely order keys in debug report (rnovacek@redhat.com)
- Fix serialization of guest list in print mode (rnovacek@redhat.com)
- Do not exit oneshot mode if any job exists (rnovacek@redhat.com)
- SubscriptionManager: check if report result has failedUpdate item
  (rnovacek@redhat.com)
- SubscriptionManager: minor logging fixes (rnovacek@redhat.com)
- SubscriptionManager: add env var to disable asynchronous reporting
  (rnovacek@redhat.com)
- Check jobs status in increasing interval (rnovacek@redhat.com)
- Esx: report host even if it doesn't have any guests (rnovacek@redhat.com)
- Hypervisors reported by hyperv now include hostname. (csnyder@redhat.com)
- Removes completed jobs. (csnyder@redhat.com)
- Fix output format in print mode (rnovacek@redhat.com)
- Fix using empty list as default parameter value (rnovacek@redhat.com)
- satellite: support new hypervisor format (rnovacek@redhat.com)
- Fix tests failures (rnovacek@redhat.com)
- Removes timeouts for jobs. All jobs in the list are now executed just before
  a new report is sent. (csnyder@redhat.com)
- The virtwho loop now blocks on the report queue with a one second timeout
  (csnyder@redhat.com)
- Removes unnecessary imports and queue (csnyder@redhat.com)
- Rewrite readme to markdown syntax (rnovacek@redhat.com)
- CI: install unittest2 from pypi (rnovacek@redhat.com)
- CI: add -y option to add-apt-repository (rnovacek@redhat.com)
- CI: another attempt on cloud archive for libvirt (rnovacek@redhat.com)
- CI: try to install newer version of libvirt from cloud archive
  (rnovacek@redhat.com)
- CI: add libvirt-dev dependency (rnovacek@redhat.com)
- CI: install libvirt-python via pip (rnovacek@redhat.com)
- CI: another attempt without site-packages (rnovacek@redhat.com)
- CI: install python-rhsm dependencies (rnovacek@redhat.com)
- Adds support for facts in Hypervisor profile. (csnyder@redhat.com)
- Adds count of unchanged mappings to the info logged for the result of an
  async job (csnyder@redhat.com)
- Adds tests for jobs in virtwho, removes unnecessary tests for managerprocess.
  (csnyder@redhat.com)
- Changes to ensure backwards compatibility with python-rhsm
  (csnyder@redhat.com)
- Fixes RhevM.getHostGuestMapping() as suggested by rnovacek
  (csnyder@redhat.com)
- Adds layer to hypervisorId. Removes completed TODO (csnyder@redhat.com)
- Moves all functionality of managerprocess into virtwho. (csnyder@redhat.com)
- CI: use python with system side packages enabled (rnovacek@redhat.com)
- CI: install m2crypto using apt instead of pip (rnovacek@redhat.com)
- CI: install python-libvirt using apt instead of pip (rnovacek@redhat.com)
- Add requirements.txt and .travis.yml for the CI (rnovacek@redhat.com)
- Adds tests to verify the hostGuestAssociation is generated correctly.
  (csnyder@redhat.com)
- Updates libvirtd and tests to add host name to hypervisor profile
  (csnyder@redhat.com)
- Updates managerprocess with better logging and changes for the new tests.~~
  (csnyder@redhat.com)
- Updates to use the new hypervisor class (csnyder@redhat.com)
- print mode: format debug message about found hypervisors
  (rnovacek@redhat.com)
- Removing uncesasary comments (csnyder@redhat.com)
- Removes unused dictionary of jobs and associated methods.
  (csnyder@redhat.com)
- Fixes tests data to include "status" key. (csnyder@redhat.com)
- Updates tests to make use of new Hypervisor class. (csnyder@redhat.com)
- Host name is now included in the hypervisor profile using the new Hypervisor
  class (csnyder@redhat.com)
- Adds new Hypervisor class. (csnyder@redhat.com)
- Adds new test for the updates to subscriptionmanager.py (csnyder@redhat.com)
- Updates fakevirt to make use of virt.Guest classes (csnyder@redhat.com)
- Changes to ensure proper execution post-merge (csnyder@redhat.com)
- Removing more unnecessary prints (csnyder@redhat.com)
- Fixes oneshot mode for work with new managerprocess (csnyder@redhat.com)
- Cleaning up unneeded prints and adding more useful debug log messages
  (csnyder@redhat.com)
- Adds async job status polling for use with the new report API
  (csnyder@redhat.com)
- This (along with python-rhsm/csnyder/new_report_api ee38f15, allows
  communication with new report api (csnyder@redhat.com)</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.16-1" date="1450353600">- Version 0.16</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.17-1" date="1463486400">- Version 0.17</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.18-1" date="1476187200">- Version 0.18</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-1" date="1488456000">- 1415497: Support rhev4 auto detection and usage (pcreech@redhat.com)
- 1388577: Adding UTF-8 support (pcreech@redhat.com)
- 1410000: Include org_id in hv base channel (pcreech@redhat.com)
- 1400431: Fix AttributeError where val is missing (pcreech@redhat.com)
- 1405967: Filter host via glob or regex (pcreech@redhat.com)
- Adds --password option to virt-who-pasword (tstrachota@redhat.com)
- 1392390 Fix default interval handling (pcreech@redhat.com)
- BZ1405967  Add filter_hosts_regex, and exclude_hosts_regex to allow filtering
  large numbers of hosts easily (chris@chrisprocter.co.uk)
- 1369107: Only load files with .conf extension (pcreech@redhat.com)
- 1383436: Obey the interval setting (csnyder@redhat.com)
- 1299643: Update virt-who-config man page to include NO_PROXY
  (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-2" date="1490788800">- 1437229: Fix syntax error in exception handling (pcreech@redhat.com)
- Update the spec file for builds on more downstream platforms
  (csnyder@redhat.com)
- 1437228: Handle utf-8 within Xmlrpc transport (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-3" date="1491998400">- Do not join threads not started, fix up fake backend (csnyder@redhat.com)
- 1439317: Ensure reports are still sent despite duplicate configurations
  (csnyder@redhat.com)
- 1436811: Send reports on the interval per destination (csnyder@redhat.com)
- 1436517: Set Version header for version detect (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-4" date="1493035200">- 1436517: Fix api base detection for rhevm version 3 and 4
  (csnyder@redhat.com)
- 1442337: Send updates immediately the first run (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-5" date="1495022400">- 1448267: Fix polling behavior for oneshot, CTRL-C, 429 responses
  (csnyder@redhat.com)
- 1450747: Continue running destination threads on internal failure
  (csnyder@redhat.com)
- 1444718: Log name of config when duplicate reports are retrieved
  (csnyder@redhat.com)
- 1447264: Keep running on InvalidPasswordFormat given other valid configs
  (csnyder@redhat.com)
- 1369107: Update docs and log messages to show the *.conf requirement
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-6" date="1500638400">- 1458674: Update use of result data to match the new async api
  (csnyder@redhat.com)</changelog>
</package>
<package pkgid="29c3f49b6510d98ac8458d6c8f0b06b7ab724d2d06ea65a4191ba51233e46ff2" name="virt-who" arch="noarch">
  <version epoch="0" ver="0.19" rel="6.el7_4"/>
  <changelog author="Devan Goodwin &lt;dgoodwin@rm-rf.ca&gt; 0.15-1" date="1438689600">- Update spec for renamed README.md. (dgoodwin@redhat.com)
- Moves fakevirt._decode() to util.decode() (csnyder@redhat.com)
- Adds the report.config.name to log message when refusing to send a report due
  to lack of change (csnyder@redhat.com)
- VirtWho: Clears list of reports on reload (csnyder@redhat.com)
- Revises change detection tests to account for changes in master
  (csnyder@redhat.com)
- Libvirtd: Sends a report on start up, and on events (csnyder@redhat.com)
- Removes trailing line at the end of the file (csnyder@redhat.com)
- Test_Esx: Test Oneshot to ensure it queues a report (csnyder@redhat.com)
- Esx: only queue data if the version has changed (csnyder@redhat.com)
- Test_VirtWho:Patches manager.Manager.fromOptions, removes unnecessary mocks
  (csnyder@redhat.com)
- Removes unhelpful debug log message (csnyder@redhat.com)
- Fix spacing, remove unused imports (csnyder@redhat.com)
- Test_VirtWho: Adds test to show same report will not be sent twice
  (csnyder@redhat.com)
- VirtWho: Adds basic change detection using report hashs (csnyder@redhat.com)
- Adds hash property to config (csnyder@redhat.com)
- Adds hash property to DomainListReport and HypervisorGuestAssociationReport
  (csnyder@redhat.com)
- Hypervisor: Adds getHash class method (csnyder@redhat.com)
- Limits interval settings (wpoteat@redhat.com)
- Retry sending data to subscription manager multiple times before dropping
  (rnovacek@redhat.com)
- SubscriptionManager: nicely order keys in debug report (rnovacek@redhat.com)
- Fix serialization of guest list in print mode (rnovacek@redhat.com)
- Do not exit oneshot mode if any job exists (rnovacek@redhat.com)
- SubscriptionManager: check if report result has failedUpdate item
  (rnovacek@redhat.com)
- SubscriptionManager: minor logging fixes (rnovacek@redhat.com)
- SubscriptionManager: add env var to disable asynchronous reporting
  (rnovacek@redhat.com)
- Check jobs status in increasing interval (rnovacek@redhat.com)
- Esx: report host even if it doesn't have any guests (rnovacek@redhat.com)
- Hypervisors reported by hyperv now include hostname. (csnyder@redhat.com)
- Removes completed jobs. (csnyder@redhat.com)
- Fix output format in print mode (rnovacek@redhat.com)
- Fix using empty list as default parameter value (rnovacek@redhat.com)
- satellite: support new hypervisor format (rnovacek@redhat.com)
- Fix tests failures (rnovacek@redhat.com)
- Removes timeouts for jobs. All jobs in the list are now executed just before
  a new report is sent. (csnyder@redhat.com)
- The virtwho loop now blocks on the report queue with a one second timeout
  (csnyder@redhat.com)
- Removes unnecessary imports and queue (csnyder@redhat.com)
- Rewrite readme to markdown syntax (rnovacek@redhat.com)
- CI: install unittest2 from pypi (rnovacek@redhat.com)
- CI: add -y option to add-apt-repository (rnovacek@redhat.com)
- CI: another attempt on cloud archive for libvirt (rnovacek@redhat.com)
- CI: try to install newer version of libvirt from cloud archive
  (rnovacek@redhat.com)
- CI: add libvirt-dev dependency (rnovacek@redhat.com)
- CI: install libvirt-python via pip (rnovacek@redhat.com)
- CI: another attempt without site-packages (rnovacek@redhat.com)
- CI: install python-rhsm dependencies (rnovacek@redhat.com)
- Adds support for facts in Hypervisor profile. (csnyder@redhat.com)
- Adds count of unchanged mappings to the info logged for the result of an
  async job (csnyder@redhat.com)
- Adds tests for jobs in virtwho, removes unnecessary tests for managerprocess.
  (csnyder@redhat.com)
- Changes to ensure backwards compatibility with python-rhsm
  (csnyder@redhat.com)
- Fixes RhevM.getHostGuestMapping() as suggested by rnovacek
  (csnyder@redhat.com)
- Adds layer to hypervisorId. Removes completed TODO (csnyder@redhat.com)
- Moves all functionality of managerprocess into virtwho. (csnyder@redhat.com)
- CI: use python with system side packages enabled (rnovacek@redhat.com)
- CI: install m2crypto using apt instead of pip (rnovacek@redhat.com)
- CI: install python-libvirt using apt instead of pip (rnovacek@redhat.com)
- Add requirements.txt and .travis.yml for the CI (rnovacek@redhat.com)
- Adds tests to verify the hostGuestAssociation is generated correctly.
  (csnyder@redhat.com)
- Updates libvirtd and tests to add host name to hypervisor profile
  (csnyder@redhat.com)
- Updates managerprocess with better logging and changes for the new tests.~~
  (csnyder@redhat.com)
- Updates to use the new hypervisor class (csnyder@redhat.com)
- print mode: format debug message about found hypervisors
  (rnovacek@redhat.com)
- Removing uncesasary comments (csnyder@redhat.com)
- Removes unused dictionary of jobs and associated methods.
  (csnyder@redhat.com)
- Fixes tests data to include "status" key. (csnyder@redhat.com)
- Updates tests to make use of new Hypervisor class. (csnyder@redhat.com)
- Host name is now included in the hypervisor profile using the new Hypervisor
  class (csnyder@redhat.com)
- Adds new Hypervisor class. (csnyder@redhat.com)
- Adds new test for the updates to subscriptionmanager.py (csnyder@redhat.com)
- Updates fakevirt to make use of virt.Guest classes (csnyder@redhat.com)
- Changes to ensure proper execution post-merge (csnyder@redhat.com)
- Removing more unnecessary prints (csnyder@redhat.com)
- Fixes oneshot mode for work with new managerprocess (csnyder@redhat.com)
- Cleaning up unneeded prints and adding more useful debug log messages
  (csnyder@redhat.com)
- Adds async job status polling for use with the new report API
  (csnyder@redhat.com)
- This (along with python-rhsm/csnyder/new_report_api ee38f15, allows
  communication with new report api (csnyder@redhat.com)</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.16-1" date="1450353600">- Version 0.16</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.17-1" date="1463486400">- Version 0.17</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.18-1" date="1476187200">- Version 0.18</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-1" date="1488456000">- 1415497: Support rhev4 auto detection and usage (pcreech@redhat.com)
- 1388577: Adding UTF-8 support (pcreech@redhat.com)
- 1410000: Include org_id in hv base channel (pcreech@redhat.com)
- 1400431: Fix AttributeError where val is missing (pcreech@redhat.com)
- 1405967: Filter host via glob or regex (pcreech@redhat.com)
- Adds --password option to virt-who-pasword (tstrachota@redhat.com)
- 1392390 Fix default interval handling (pcreech@redhat.com)
- BZ1405967  Add filter_hosts_regex, and exclude_hosts_regex to allow filtering
  large numbers of hosts easily (chris@chrisprocter.co.uk)
- 1369107: Only load files with .conf extension (pcreech@redhat.com)
- 1383436: Obey the interval setting (csnyder@redhat.com)
- 1299643: Update virt-who-config man page to include NO_PROXY
  (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-2" date="1490788800">- 1437229: Fix syntax error in exception handling (pcreech@redhat.com)
- Update the spec file for builds on more downstream platforms
  (csnyder@redhat.com)
- 1437228: Handle utf-8 within Xmlrpc transport (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-3" date="1491998400">- Do not join threads not started, fix up fake backend (csnyder@redhat.com)
- 1439317: Ensure reports are still sent despite duplicate configurations
  (csnyder@redhat.com)
- 1436811: Send reports on the interval per destination (csnyder@redhat.com)
- 1436517: Set Version header for version detect (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-4" date="1493035200">- 1436517: Fix api base detection for rhevm version 3 and 4
  (csnyder@redhat.com)
- 1442337: Send updates immediately the first run (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-5" date="1495022400">- 1448267: Fix polling behavior for oneshot, CTRL-C, 429 responses
  (csnyder@redhat.com)
- 1450747: Continue running destination threads on internal failure
  (csnyder@redhat.com)
- 1444718: Log name of config when duplicate reports are retrieved
  (csnyder@redhat.com)
- 1447264: Keep running on InvalidPasswordFormat given other valid configs
  (csnyder@redhat.com)
- 1369107: Update docs and log messages to show the *.conf requirement
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-6" date="1500638400">- 1458674: Update use of result data to match the new async api
  (csnyder@redhat.com)</changelog>
</package>
<package pkgid="523a8fed51a2d8563da6644e0fefee3b7a791a82511bdcbd76ed363ec736df10" name="virt-who" arch="src">
  <version epoch="0" ver="0.19" rel="6.el7_4"/>
  <changelog author="Devan Goodwin &lt;dgoodwin@rm-rf.ca&gt; 0.15-1" date="1438689600">- Update spec for renamed README.md. (dgoodwin@redhat.com)
- Moves fakevirt._decode() to util.decode() (csnyder@redhat.com)
- Adds the report.config.name to log message when refusing to send a report due
  to lack of change (csnyder@redhat.com)
- VirtWho: Clears list of reports on reload (csnyder@redhat.com)
- Revises change detection tests to account for changes in master
  (csnyder@redhat.com)
- Libvirtd: Sends a report on start up, and on events (csnyder@redhat.com)
- Removes trailing line at the end of the file (csnyder@redhat.com)
- Test_Esx: Test Oneshot to ensure it queues a report (csnyder@redhat.com)
- Esx: only queue data if the version has changed (csnyder@redhat.com)
- Test_VirtWho:Patches manager.Manager.fromOptions, removes unnecessary mocks
  (csnyder@redhat.com)
- Removes unhelpful debug log message (csnyder@redhat.com)
- Fix spacing, remove unused imports (csnyder@redhat.com)
- Test_VirtWho: Adds test to show same report will not be sent twice
  (csnyder@redhat.com)
- VirtWho: Adds basic change detection using report hashs (csnyder@redhat.com)
- Adds hash property to config (csnyder@redhat.com)
- Adds hash property to DomainListReport and HypervisorGuestAssociationReport
  (csnyder@redhat.com)
- Hypervisor: Adds getHash class method (csnyder@redhat.com)
- Limits interval settings (wpoteat@redhat.com)
- Retry sending data to subscription manager multiple times before dropping
  (rnovacek@redhat.com)
- SubscriptionManager: nicely order keys in debug report (rnovacek@redhat.com)
- Fix serialization of guest list in print mode (rnovacek@redhat.com)
- Do not exit oneshot mode if any job exists (rnovacek@redhat.com)
- SubscriptionManager: check if report result has failedUpdate item
  (rnovacek@redhat.com)
- SubscriptionManager: minor logging fixes (rnovacek@redhat.com)
- SubscriptionManager: add env var to disable asynchronous reporting
  (rnovacek@redhat.com)
- Check jobs status in increasing interval (rnovacek@redhat.com)
- Esx: report host even if it doesn't have any guests (rnovacek@redhat.com)
- Hypervisors reported by hyperv now include hostname. (csnyder@redhat.com)
- Removes completed jobs. (csnyder@redhat.com)
- Fix output format in print mode (rnovacek@redhat.com)
- Fix using empty list as default parameter value (rnovacek@redhat.com)
- satellite: support new hypervisor format (rnovacek@redhat.com)
- Fix tests failures (rnovacek@redhat.com)
- Removes timeouts for jobs. All jobs in the list are now executed just before
  a new report is sent. (csnyder@redhat.com)
- The virtwho loop now blocks on the report queue with a one second timeout
  (csnyder@redhat.com)
- Removes unnecessary imports and queue (csnyder@redhat.com)
- Rewrite readme to markdown syntax (rnovacek@redhat.com)
- CI: install unittest2 from pypi (rnovacek@redhat.com)
- CI: add -y option to add-apt-repository (rnovacek@redhat.com)
- CI: another attempt on cloud archive for libvirt (rnovacek@redhat.com)
- CI: try to install newer version of libvirt from cloud archive
  (rnovacek@redhat.com)
- CI: add libvirt-dev dependency (rnovacek@redhat.com)
- CI: install libvirt-python via pip (rnovacek@redhat.com)
- CI: another attempt without site-packages (rnovacek@redhat.com)
- CI: install python-rhsm dependencies (rnovacek@redhat.com)
- Adds support for facts in Hypervisor profile. (csnyder@redhat.com)
- Adds count of unchanged mappings to the info logged for the result of an
  async job (csnyder@redhat.com)
- Adds tests for jobs in virtwho, removes unnecessary tests for managerprocess.
  (csnyder@redhat.com)
- Changes to ensure backwards compatibility with python-rhsm
  (csnyder@redhat.com)
- Fixes RhevM.getHostGuestMapping() as suggested by rnovacek
  (csnyder@redhat.com)
- Adds layer to hypervisorId. Removes completed TODO (csnyder@redhat.com)
- Moves all functionality of managerprocess into virtwho. (csnyder@redhat.com)
- CI: use python with system side packages enabled (rnovacek@redhat.com)
- CI: install m2crypto using apt instead of pip (rnovacek@redhat.com)
- CI: install python-libvirt using apt instead of pip (rnovacek@redhat.com)
- Add requirements.txt and .travis.yml for the CI (rnovacek@redhat.com)
- Adds tests to verify the hostGuestAssociation is generated correctly.
  (csnyder@redhat.com)
- Updates libvirtd and tests to add host name to hypervisor profile
  (csnyder@redhat.com)
- Updates managerprocess with better logging and changes for the new tests.~~
  (csnyder@redhat.com)
- Updates to use the new hypervisor class (csnyder@redhat.com)
- print mode: format debug message about found hypervisors
  (rnovacek@redhat.com)
- Removing uncesasary comments (csnyder@redhat.com)
- Removes unused dictionary of jobs and associated methods.
  (csnyder@redhat.com)
- Fixes tests data to include "status" key. (csnyder@redhat.com)
- Updates tests to make use of new Hypervisor class. (csnyder@redhat.com)
- Host name is now included in the hypervisor profile using the new Hypervisor
  class (csnyder@redhat.com)
- Adds new Hypervisor class. (csnyder@redhat.com)
- Adds new test for the updates to subscriptionmanager.py (csnyder@redhat.com)
- Updates fakevirt to make use of virt.Guest classes (csnyder@redhat.com)
- Changes to ensure proper execution post-merge (csnyder@redhat.com)
- Removing more unnecessary prints (csnyder@redhat.com)
- Fixes oneshot mode for work with new managerprocess (csnyder@redhat.com)
- Cleaning up unneeded prints and adding more useful debug log messages
  (csnyder@redhat.com)
- Adds async job status polling for use with the new report API
  (csnyder@redhat.com)
- This (along with python-rhsm/csnyder/new_report_api ee38f15, allows
  communication with new report api (csnyder@redhat.com)</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.16-1" date="1450353600">- Version 0.16</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.17-1" date="1463486400">- Version 0.17</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.18-1" date="1476187200">- Version 0.18</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-1" date="1488456000">- 1415497: Support rhev4 auto detection and usage (pcreech@redhat.com)
- 1388577: Adding UTF-8 support (pcreech@redhat.com)
- 1410000: Include org_id in hv base channel (pcreech@redhat.com)
- 1400431: Fix AttributeError where val is missing (pcreech@redhat.com)
- 1405967: Filter host via glob or regex (pcreech@redhat.com)
- Adds --password option to virt-who-pasword (tstrachota@redhat.com)
- 1392390 Fix default interval handling (pcreech@redhat.com)
- BZ1405967  Add filter_hosts_regex, and exclude_hosts_regex to allow filtering
  large numbers of hosts easily (chris@chrisprocter.co.uk)
- 1369107: Only load files with .conf extension (pcreech@redhat.com)
- 1383436: Obey the interval setting (csnyder@redhat.com)
- 1299643: Update virt-who-config man page to include NO_PROXY
  (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-2" date="1490788800">- 1437229: Fix syntax error in exception handling (pcreech@redhat.com)
- Update the spec file for builds on more downstream platforms
  (csnyder@redhat.com)
- 1437228: Handle utf-8 within Xmlrpc transport (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-3" date="1491998400">- Do not join threads not started, fix up fake backend (csnyder@redhat.com)
- 1439317: Ensure reports are still sent despite duplicate configurations
  (csnyder@redhat.com)
- 1436811: Send reports on the interval per destination (csnyder@redhat.com)
- 1436517: Set Version header for version detect (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-4" date="1493035200">- 1436517: Fix api base detection for rhevm version 3 and 4
  (csnyder@redhat.com)
- 1442337: Send updates immediately the first run (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-5" date="1495022400">- 1448267: Fix polling behavior for oneshot, CTRL-C, 429 responses
  (csnyder@redhat.com)
- 1450747: Continue running destination threads on internal failure
  (csnyder@redhat.com)
- 1444718: Log name of config when duplicate reports are retrieved
  (csnyder@redhat.com)
- 1447264: Keep running on InvalidPasswordFormat given other valid configs
  (csnyder@redhat.com)
- 1369107: Update docs and log messages to show the *.conf requirement
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-6" date="1500638400">- 1458674: Update use of result data to match the new async api
  (csnyder@redhat.com)</changelog>
</package>
<package pkgid="5529a5d4272f0a148e342ff1fa885a5e5b63f1483b0fe7077b0d5d768bf427da" name="virt-who" arch="src">
  <version epoch="0" ver="0.19" rel="6.el7_4"/>
  <changelog author="Devan Goodwin &lt;dgoodwin@rm-rf.ca&gt; 0.15-1" date="1438689600">- Update spec for renamed README.md. (dgoodwin@redhat.com)
- Moves fakevirt._decode() to util.decode() (csnyder@redhat.com)
- Adds the report.config.name to log message when refusing to send a report due
  to lack of change (csnyder@redhat.com)
- VirtWho: Clears list of reports on reload (csnyder@redhat.com)
- Revises change detection tests to account for changes in master
  (csnyder@redhat.com)
- Libvirtd: Sends a report on start up, and on events (csnyder@redhat.com)
- Removes trailing line at the end of the file (csnyder@redhat.com)
- Test_Esx: Test Oneshot to ensure it queues a report (csnyder@redhat.com)
- Esx: only queue data if the version has changed (csnyder@redhat.com)
- Test_VirtWho:Patches manager.Manager.fromOptions, removes unnecessary mocks
  (csnyder@redhat.com)
- Removes unhelpful debug log message (csnyder@redhat.com)
- Fix spacing, remove unused imports (csnyder@redhat.com)
- Test_VirtWho: Adds test to show same report will not be sent twice
  (csnyder@redhat.com)
- VirtWho: Adds basic change detection using report hashs (csnyder@redhat.com)
- Adds hash property to config (csnyder@redhat.com)
- Adds hash property to DomainListReport and HypervisorGuestAssociationReport
  (csnyder@redhat.com)
- Hypervisor: Adds getHash class method (csnyder@redhat.com)
- Limits interval settings (wpoteat@redhat.com)
- Retry sending data to subscription manager multiple times before dropping
  (rnovacek@redhat.com)
- SubscriptionManager: nicely order keys in debug report (rnovacek@redhat.com)
- Fix serialization of guest list in print mode (rnovacek@redhat.com)
- Do not exit oneshot mode if any job exists (rnovacek@redhat.com)
- SubscriptionManager: check if report result has failedUpdate item
  (rnovacek@redhat.com)
- SubscriptionManager: minor logging fixes (rnovacek@redhat.com)
- SubscriptionManager: add env var to disable asynchronous reporting
  (rnovacek@redhat.com)
- Check jobs status in increasing interval (rnovacek@redhat.com)
- Esx: report host even if it doesn't have any guests (rnovacek@redhat.com)
- Hypervisors reported by hyperv now include hostname. (csnyder@redhat.com)
- Removes completed jobs. (csnyder@redhat.com)
- Fix output format in print mode (rnovacek@redhat.com)
- Fix using empty list as default parameter value (rnovacek@redhat.com)
- satellite: support new hypervisor format (rnovacek@redhat.com)
- Fix tests failures (rnovacek@redhat.com)
- Removes timeouts for jobs. All jobs in the list are now executed just before
  a new report is sent. (csnyder@redhat.com)
- The virtwho loop now blocks on the report queue with a one second timeout
  (csnyder@redhat.com)
- Removes unnecessary imports and queue (csnyder@redhat.com)
- Rewrite readme to markdown syntax (rnovacek@redhat.com)
- CI: install unittest2 from pypi (rnovacek@redhat.com)
- CI: add -y option to add-apt-repository (rnovacek@redhat.com)
- CI: another attempt on cloud archive for libvirt (rnovacek@redhat.com)
- CI: try to install newer version of libvirt from cloud archive
  (rnovacek@redhat.com)
- CI: add libvirt-dev dependency (rnovacek@redhat.com)
- CI: install libvirt-python via pip (rnovacek@redhat.com)
- CI: another attempt without site-packages (rnovacek@redhat.com)
- CI: install python-rhsm dependencies (rnovacek@redhat.com)
- Adds support for facts in Hypervisor profile. (csnyder@redhat.com)
- Adds count of unchanged mappings to the info logged for the result of an
  async job (csnyder@redhat.com)
- Adds tests for jobs in virtwho, removes unnecessary tests for managerprocess.
  (csnyder@redhat.com)
- Changes to ensure backwards compatibility with python-rhsm
  (csnyder@redhat.com)
- Fixes RhevM.getHostGuestMapping() as suggested by rnovacek
  (csnyder@redhat.com)
- Adds layer to hypervisorId. Removes completed TODO (csnyder@redhat.com)
- Moves all functionality of managerprocess into virtwho. (csnyder@redhat.com)
- CI: use python with system side packages enabled (rnovacek@redhat.com)
- CI: install m2crypto using apt instead of pip (rnovacek@redhat.com)
- CI: install python-libvirt using apt instead of pip (rnovacek@redhat.com)
- Add requirements.txt and .travis.yml for the CI (rnovacek@redhat.com)
- Adds tests to verify the hostGuestAssociation is generated correctly.
  (csnyder@redhat.com)
- Updates libvirtd and tests to add host name to hypervisor profile
  (csnyder@redhat.com)
- Updates managerprocess with better logging and changes for the new tests.~~
  (csnyder@redhat.com)
- Updates to use the new hypervisor class (csnyder@redhat.com)
- print mode: format debug message about found hypervisors
  (rnovacek@redhat.com)
- Removing uncesasary comments (csnyder@redhat.com)
- Removes unused dictionary of jobs and associated methods.
  (csnyder@redhat.com)
- Fixes tests data to include "status" key. (csnyder@redhat.com)
- Updates tests to make use of new Hypervisor class. (csnyder@redhat.com)
- Host name is now included in the hypervisor profile using the new Hypervisor
  class (csnyder@redhat.com)
- Adds new Hypervisor class. (csnyder@redhat.com)
- Adds new test for the updates to subscriptionmanager.py (csnyder@redhat.com)
- Updates fakevirt to make use of virt.Guest classes (csnyder@redhat.com)
- Changes to ensure proper execution post-merge (csnyder@redhat.com)
- Removing more unnecessary prints (csnyder@redhat.com)
- Fixes oneshot mode for work with new managerprocess (csnyder@redhat.com)
- Cleaning up unneeded prints and adding more useful debug log messages
  (csnyder@redhat.com)
- Adds async job status polling for use with the new report API
  (csnyder@redhat.com)
- This (along with python-rhsm/csnyder/new_report_api ee38f15, allows
  communication with new report api (csnyder@redhat.com)</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.16-1" date="1450353600">- Version 0.16</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.17-1" date="1463486400">- Version 0.17</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.18-1" date="1476187200">- Version 0.18</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-1" date="1488456000">- 1415497: Support rhev4 auto detection and usage (pcreech@redhat.com)
- 1388577: Adding UTF-8 support (pcreech@redhat.com)
- 1410000: Include org_id in hv base channel (pcreech@redhat.com)
- 1400431: Fix AttributeError where val is missing (pcreech@redhat.com)
- 1405967: Filter host via glob or regex (pcreech@redhat.com)
- Adds --password option to virt-who-pasword (tstrachota@redhat.com)
- 1392390 Fix default interval handling (pcreech@redhat.com)
- BZ1405967  Add filter_hosts_regex, and exclude_hosts_regex to allow filtering
  large numbers of hosts easily (chris@chrisprocter.co.uk)
- 1369107: Only load files with .conf extension (pcreech@redhat.com)
- 1383436: Obey the interval setting (csnyder@redhat.com)
- 1299643: Update virt-who-config man page to include NO_PROXY
  (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-2" date="1490788800">- 1437229: Fix syntax error in exception handling (pcreech@redhat.com)
- Update the spec file for builds on more downstream platforms
  (csnyder@redhat.com)
- 1437228: Handle utf-8 within Xmlrpc transport (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-3" date="1491998400">- Do not join threads not started, fix up fake backend (csnyder@redhat.com)
- 1439317: Ensure reports are still sent despite duplicate configurations
  (csnyder@redhat.com)
- 1436811: Send reports on the interval per destination (csnyder@redhat.com)
- 1436517: Set Version header for version detect (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-4" date="1493035200">- 1436517: Fix api base detection for rhevm version 3 and 4
  (csnyder@redhat.com)
- 1442337: Send updates immediately the first run (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-5" date="1495022400">- 1448267: Fix polling behavior for oneshot, CTRL-C, 429 responses
  (csnyder@redhat.com)
- 1450747: Continue running destination threads on internal failure
  (csnyder@redhat.com)
- 1444718: Log name of config when duplicate reports are retrieved
  (csnyder@redhat.com)
- 1447264: Keep running on InvalidPasswordFormat given other valid configs
  (csnyder@redhat.com)
- 1369107: Update docs and log messages to show the *.conf requirement
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-6" date="1500638400">- 1458674: Update use of result data to match the new async api
  (csnyder@redhat.com)</changelog>
</package>
<package pkgid="9ae0e7db3ce3a3e051e34055111168da763ed90f05babf461f867c4724ff071c" name="virt-who" arch="noarch">
  <version epoch="0" ver="0.19" rel="7.el7_4"/>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.16-1" date="1450353600">- Version 0.16</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.17-1" date="1463486400">- Version 0.17</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.18-1" date="1476187200">- Version 0.18</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-1" date="1488456000">- 1415497: Support rhev4 auto detection and usage (pcreech@redhat.com)
- 1388577: Adding UTF-8 support (pcreech@redhat.com)
- 1410000: Include org_id in hv base channel (pcreech@redhat.com)
- 1400431: Fix AttributeError where val is missing (pcreech@redhat.com)
- 1405967: Filter host via glob or regex (pcreech@redhat.com)
- Adds --password option to virt-who-pasword (tstrachota@redhat.com)
- 1392390 Fix default interval handling (pcreech@redhat.com)
- BZ1405967  Add filter_hosts_regex, and exclude_hosts_regex to allow filtering
  large numbers of hosts easily (chris@chrisprocter.co.uk)
- 1369107: Only load files with .conf extension (pcreech@redhat.com)
- 1383436: Obey the interval setting (csnyder@redhat.com)
- 1299643: Update virt-who-config man page to include NO_PROXY
  (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-2" date="1490788800">- 1437229: Fix syntax error in exception handling (pcreech@redhat.com)
- Update the spec file for builds on more downstream platforms
  (csnyder@redhat.com)
- 1437228: Handle utf-8 within Xmlrpc transport (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-3" date="1491998400">- Do not join threads not started, fix up fake backend (csnyder@redhat.com)
- 1439317: Ensure reports are still sent despite duplicate configurations
  (csnyder@redhat.com)
- 1436811: Send reports on the interval per destination (csnyder@redhat.com)
- 1436517: Set Version header for version detect (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-4" date="1493035200">- 1436517: Fix api base detection for rhevm version 3 and 4
  (csnyder@redhat.com)
- 1442337: Send updates immediately the first run (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-5" date="1495022400">- 1448267: Fix polling behavior for oneshot, CTRL-C, 429 responses
  (csnyder@redhat.com)
- 1450747: Continue running destination threads on internal failure
  (csnyder@redhat.com)
- 1444718: Log name of config when duplicate reports are retrieved
  (csnyder@redhat.com)
- 1447264: Keep running on InvalidPasswordFormat given other valid configs
  (csnyder@redhat.com)
- 1369107: Update docs and log messages to show the *.conf requirement
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-6" date="1500638400">- 1458674: Update use of result data to match the new async api
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-7" date="1508932800">- 1506263: Updates to the job polling frequency (csnyder@redhat.com)</changelog>
</package>
<package pkgid="658fe39c895d64693268684c0ffcc31524c8ff92c12b9b959aa1af54db0c13da" name="virt-who" arch="noarch">
  <version epoch="0" ver="0.19" rel="7.el7_4"/>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.16-1" date="1450353600">- Version 0.16</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.17-1" date="1463486400">- Version 0.17</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.18-1" date="1476187200">- Version 0.18</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-1" date="1488456000">- 1415497: Support rhev4 auto detection and usage (pcreech@redhat.com)
- 1388577: Adding UTF-8 support (pcreech@redhat.com)
- 1410000: Include org_id in hv base channel (pcreech@redhat.com)
- 1400431: Fix AttributeError where val is missing (pcreech@redhat.com)
- 1405967: Filter host via glob or regex (pcreech@redhat.com)
- Adds --password option to virt-who-pasword (tstrachota@redhat.com)
- 1392390 Fix default interval handling (pcreech@redhat.com)
- BZ1405967  Add filter_hosts_regex, and exclude_hosts_regex to allow filtering
  large numbers of hosts easily (chris@chrisprocter.co.uk)
- 1369107: Only load files with .conf extension (pcreech@redhat.com)
- 1383436: Obey the interval setting (csnyder@redhat.com)
- 1299643: Update virt-who-config man page to include NO_PROXY
  (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-2" date="1490788800">- 1437229: Fix syntax error in exception handling (pcreech@redhat.com)
- Update the spec file for builds on more downstream platforms
  (csnyder@redhat.com)
- 1437228: Handle utf-8 within Xmlrpc transport (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-3" date="1491998400">- Do not join threads not started, fix up fake backend (csnyder@redhat.com)
- 1439317: Ensure reports are still sent despite duplicate configurations
  (csnyder@redhat.com)
- 1436811: Send reports on the interval per destination (csnyder@redhat.com)
- 1436517: Set Version header for version detect (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-4" date="1493035200">- 1436517: Fix api base detection for rhevm version 3 and 4
  (csnyder@redhat.com)
- 1442337: Send updates immediately the first run (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-5" date="1495022400">- 1448267: Fix polling behavior for oneshot, CTRL-C, 429 responses
  (csnyder@redhat.com)
- 1450747: Continue running destination threads on internal failure
  (csnyder@redhat.com)
- 1444718: Log name of config when duplicate reports are retrieved
  (csnyder@redhat.com)
- 1447264: Keep running on InvalidPasswordFormat given other valid configs
  (csnyder@redhat.com)
- 1369107: Update docs and log messages to show the *.conf requirement
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-6" date="1500638400">- 1458674: Update use of result data to match the new async api
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-7" date="1508932800">- 1506263: Updates to the job polling frequency (csnyder@redhat.com)</changelog>
</package>
<package pkgid="1660c2e37f49ad1adbf26ad7dbb0a07aec48e51ef7cd92b69459c54a9dcd0e83" name="virt-who" arch="src">
  <version epoch="0" ver="0.19" rel="7.el7_4"/>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.16-1" date="1450353600">- Version 0.16</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.17-1" date="1463486400">- Version 0.17</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.18-1" date="1476187200">- Version 0.18</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-1" date="1488456000">- 1415497: Support rhev4 auto detection and usage (pcreech@redhat.com)
- 1388577: Adding UTF-8 support (pcreech@redhat.com)
- 1410000: Include org_id in hv base channel (pcreech@redhat.com)
- 1400431: Fix AttributeError where val is missing (pcreech@redhat.com)
- 1405967: Filter host via glob or regex (pcreech@redhat.com)
- Adds --password option to virt-who-pasword (tstrachota@redhat.com)
- 1392390 Fix default interval handling (pcreech@redhat.com)
- BZ1405967  Add filter_hosts_regex, and exclude_hosts_regex to allow filtering
  large numbers of hosts easily (chris@chrisprocter.co.uk)
- 1369107: Only load files with .conf extension (pcreech@redhat.com)
- 1383436: Obey the interval setting (csnyder@redhat.com)
- 1299643: Update virt-who-config man page to include NO_PROXY
  (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-2" date="1490788800">- 1437229: Fix syntax error in exception handling (pcreech@redhat.com)
- Update the spec file for builds on more downstream platforms
  (csnyder@redhat.com)
- 1437228: Handle utf-8 within Xmlrpc transport (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-3" date="1491998400">- Do not join threads not started, fix up fake backend (csnyder@redhat.com)
- 1439317: Ensure reports are still sent despite duplicate configurations
  (csnyder@redhat.com)
- 1436811: Send reports on the interval per destination (csnyder@redhat.com)
- 1436517: Set Version header for version detect (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-4" date="1493035200">- 1436517: Fix api base detection for rhevm version 3 and 4
  (csnyder@redhat.com)
- 1442337: Send updates immediately the first run (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-5" date="1495022400">- 1448267: Fix polling behavior for oneshot, CTRL-C, 429 responses
  (csnyder@redhat.com)
- 1450747: Continue running destination threads on internal failure
  (csnyder@redhat.com)
- 1444718: Log name of config when duplicate reports are retrieved
  (csnyder@redhat.com)
- 1447264: Keep running on InvalidPasswordFormat given other valid configs
  (csnyder@redhat.com)
- 1369107: Update docs and log messages to show the *.conf requirement
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-6" date="1500638400">- 1458674: Update use of result data to match the new async api
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-7" date="1508932800">- 1506263: Updates to the job polling frequency (csnyder@redhat.com)</changelog>
</package>
<package pkgid="7fb4b21501bce33ca31e0268098912da17225ac0ae096b17954802819391fcd7" name="virt-who" arch="src">
  <version epoch="0" ver="0.19" rel="7.el7_4"/>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.16-1" date="1450353600">- Version 0.16</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.17-1" date="1463486400">- Version 0.17</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.18-1" date="1476187200">- Version 0.18</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-1" date="1488456000">- 1415497: Support rhev4 auto detection and usage (pcreech@redhat.com)
- 1388577: Adding UTF-8 support (pcreech@redhat.com)
- 1410000: Include org_id in hv base channel (pcreech@redhat.com)
- 1400431: Fix AttributeError where val is missing (pcreech@redhat.com)
- 1405967: Filter host via glob or regex (pcreech@redhat.com)
- Adds --password option to virt-who-pasword (tstrachota@redhat.com)
- 1392390 Fix default interval handling (pcreech@redhat.com)
- BZ1405967  Add filter_hosts_regex, and exclude_hosts_regex to allow filtering
  large numbers of hosts easily (chris@chrisprocter.co.uk)
- 1369107: Only load files with .conf extension (pcreech@redhat.com)
- 1383436: Obey the interval setting (csnyder@redhat.com)
- 1299643: Update virt-who-config man page to include NO_PROXY
  (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-2" date="1490788800">- 1437229: Fix syntax error in exception handling (pcreech@redhat.com)
- Update the spec file for builds on more downstream platforms
  (csnyder@redhat.com)
- 1437228: Handle utf-8 within Xmlrpc transport (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-3" date="1491998400">- Do not join threads not started, fix up fake backend (csnyder@redhat.com)
- 1439317: Ensure reports are still sent despite duplicate configurations
  (csnyder@redhat.com)
- 1436811: Send reports on the interval per destination (csnyder@redhat.com)
- 1436517: Set Version header for version detect (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-4" date="1493035200">- 1436517: Fix api base detection for rhevm version 3 and 4
  (csnyder@redhat.com)
- 1442337: Send updates immediately the first run (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-5" date="1495022400">- 1448267: Fix polling behavior for oneshot, CTRL-C, 429 responses
  (csnyder@redhat.com)
- 1450747: Continue running destination threads on internal failure
  (csnyder@redhat.com)
- 1444718: Log name of config when duplicate reports are retrieved
  (csnyder@redhat.com)
- 1447264: Keep running on InvalidPasswordFormat given other valid configs
  (csnyder@redhat.com)
- 1369107: Update docs and log messages to show the *.conf requirement
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-6" date="1500638400">- 1458674: Update use of result data to match the new async api
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-7" date="1508932800">- 1506263: Updates to the job polling frequency (csnyder@redhat.com)</changelog>
</package>
<package pkgid="356073d0529362d910a19d66287aa46d353bafa05b109595f8f6248eb9e241ea" name="virt-who" arch="noarch">
  <version epoch="0" ver="0.19" rel="8.el7_4"/>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.17-1" date="1463486400">- Version 0.17</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.18-1" date="1476187200">- Version 0.18</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-1" date="1488456000">- 1415497: Support rhev4 auto detection and usage (pcreech@redhat.com)
- 1388577: Adding UTF-8 support (pcreech@redhat.com)
- 1410000: Include org_id in hv base channel (pcreech@redhat.com)
- 1400431: Fix AttributeError where val is missing (pcreech@redhat.com)
- 1405967: Filter host via glob or regex (pcreech@redhat.com)
- Adds --password option to virt-who-pasword (tstrachota@redhat.com)
- 1392390 Fix default interval handling (pcreech@redhat.com)
- BZ1405967  Add filter_hosts_regex, and exclude_hosts_regex to allow filtering
  large numbers of hosts easily (chris@chrisprocter.co.uk)
- 1369107: Only load files with .conf extension (pcreech@redhat.com)
- 1383436: Obey the interval setting (csnyder@redhat.com)
- 1299643: Update virt-who-config man page to include NO_PROXY
  (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-2" date="1490788800">- 1437229: Fix syntax error in exception handling (pcreech@redhat.com)
- Update the spec file for builds on more downstream platforms
  (csnyder@redhat.com)
- 1437228: Handle utf-8 within Xmlrpc transport (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-3" date="1491998400">- Do not join threads not started, fix up fake backend (csnyder@redhat.com)
- 1439317: Ensure reports are still sent despite duplicate configurations
  (csnyder@redhat.com)
- 1436811: Send reports on the interval per destination (csnyder@redhat.com)
- 1436517: Set Version header for version detect (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-4" date="1493035200">- 1436517: Fix api base detection for rhevm version 3 and 4
  (csnyder@redhat.com)
- 1442337: Send updates immediately the first run (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-5" date="1495022400">- 1448267: Fix polling behavior for oneshot, CTRL-C, 429 responses
  (csnyder@redhat.com)
- 1450747: Continue running destination threads on internal failure
  (csnyder@redhat.com)
- 1444718: Log name of config when duplicate reports are retrieved
  (csnyder@redhat.com)
- 1447264: Keep running on InvalidPasswordFormat given other valid configs
  (csnyder@redhat.com)
- 1369107: Update docs and log messages to show the *.conf requirement
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-6" date="1500638400">- 1458674: Update use of result data to match the new async api
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-7" date="1508932800">- 1506263: Updates to the job polling frequency (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-8" date="1517832000">- 1540296: Add JSON-RPC support for VDSM (khowell@redhat.com)</changelog>
</package>
<package pkgid="3f06fd175ad3ae0103cca3020972ba0a50b94b7f91df170bab76eb38ad789bab" name="virt-who" arch="noarch">
  <version epoch="0" ver="0.19" rel="8.el7_4"/>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.17-1" date="1463486400">- Version 0.17</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.18-1" date="1476187200">- Version 0.18</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-1" date="1488456000">- 1415497: Support rhev4 auto detection and usage (pcreech@redhat.com)
- 1388577: Adding UTF-8 support (pcreech@redhat.com)
- 1410000: Include org_id in hv base channel (pcreech@redhat.com)
- 1400431: Fix AttributeError where val is missing (pcreech@redhat.com)
- 1405967: Filter host via glob or regex (pcreech@redhat.com)
- Adds --password option to virt-who-pasword (tstrachota@redhat.com)
- 1392390 Fix default interval handling (pcreech@redhat.com)
- BZ1405967  Add filter_hosts_regex, and exclude_hosts_regex to allow filtering
  large numbers of hosts easily (chris@chrisprocter.co.uk)
- 1369107: Only load files with .conf extension (pcreech@redhat.com)
- 1383436: Obey the interval setting (csnyder@redhat.com)
- 1299643: Update virt-who-config man page to include NO_PROXY
  (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-2" date="1490788800">- 1437229: Fix syntax error in exception handling (pcreech@redhat.com)
- Update the spec file for builds on more downstream platforms
  (csnyder@redhat.com)
- 1437228: Handle utf-8 within Xmlrpc transport (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-3" date="1491998400">- Do not join threads not started, fix up fake backend (csnyder@redhat.com)
- 1439317: Ensure reports are still sent despite duplicate configurations
  (csnyder@redhat.com)
- 1436811: Send reports on the interval per destination (csnyder@redhat.com)
- 1436517: Set Version header for version detect (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-4" date="1493035200">- 1436517: Fix api base detection for rhevm version 3 and 4
  (csnyder@redhat.com)
- 1442337: Send updates immediately the first run (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-5" date="1495022400">- 1448267: Fix polling behavior for oneshot, CTRL-C, 429 responses
  (csnyder@redhat.com)
- 1450747: Continue running destination threads on internal failure
  (csnyder@redhat.com)
- 1444718: Log name of config when duplicate reports are retrieved
  (csnyder@redhat.com)
- 1447264: Keep running on InvalidPasswordFormat given other valid configs
  (csnyder@redhat.com)
- 1369107: Update docs and log messages to show the *.conf requirement
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-6" date="1500638400">- 1458674: Update use of result data to match the new async api
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-7" date="1508932800">- 1506263: Updates to the job polling frequency (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-8" date="1517832000">- 1540296: Add JSON-RPC support for VDSM (khowell@redhat.com)</changelog>
</package>
<package pkgid="52a85d00268daeb7eff4e264a80a6087a9a0e0e4e01904897b850b134d322b7e" name="virt-who" arch="src">
  <version epoch="0" ver="0.19" rel="8.el7_4"/>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.17-1" date="1463486400">- Version 0.17</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.18-1" date="1476187200">- Version 0.18</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-1" date="1488456000">- 1415497: Support rhev4 auto detection and usage (pcreech@redhat.com)
- 1388577: Adding UTF-8 support (pcreech@redhat.com)
- 1410000: Include org_id in hv base channel (pcreech@redhat.com)
- 1400431: Fix AttributeError where val is missing (pcreech@redhat.com)
- 1405967: Filter host via glob or regex (pcreech@redhat.com)
- Adds --password option to virt-who-pasword (tstrachota@redhat.com)
- 1392390 Fix default interval handling (pcreech@redhat.com)
- BZ1405967  Add filter_hosts_regex, and exclude_hosts_regex to allow filtering
  large numbers of hosts easily (chris@chrisprocter.co.uk)
- 1369107: Only load files with .conf extension (pcreech@redhat.com)
- 1383436: Obey the interval setting (csnyder@redhat.com)
- 1299643: Update virt-who-config man page to include NO_PROXY
  (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-2" date="1490788800">- 1437229: Fix syntax error in exception handling (pcreech@redhat.com)
- Update the spec file for builds on more downstream platforms
  (csnyder@redhat.com)
- 1437228: Handle utf-8 within Xmlrpc transport (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-3" date="1491998400">- Do not join threads not started, fix up fake backend (csnyder@redhat.com)
- 1439317: Ensure reports are still sent despite duplicate configurations
  (csnyder@redhat.com)
- 1436811: Send reports on the interval per destination (csnyder@redhat.com)
- 1436517: Set Version header for version detect (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-4" date="1493035200">- 1436517: Fix api base detection for rhevm version 3 and 4
  (csnyder@redhat.com)
- 1442337: Send updates immediately the first run (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-5" date="1495022400">- 1448267: Fix polling behavior for oneshot, CTRL-C, 429 responses
  (csnyder@redhat.com)
- 1450747: Continue running destination threads on internal failure
  (csnyder@redhat.com)
- 1444718: Log name of config when duplicate reports are retrieved
  (csnyder@redhat.com)
- 1447264: Keep running on InvalidPasswordFormat given other valid configs
  (csnyder@redhat.com)
- 1369107: Update docs and log messages to show the *.conf requirement
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-6" date="1500638400">- 1458674: Update use of result data to match the new async api
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-7" date="1508932800">- 1506263: Updates to the job polling frequency (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-8" date="1517832000">- 1540296: Add JSON-RPC support for VDSM (khowell@redhat.com)</changelog>
</package>
<package pkgid="9c11f606dfe1c232bf90f8a9519e985c4624f18aa788a58353e2cc6ac752565f" name="virt-who" arch="src">
  <version epoch="0" ver="0.19" rel="8.el7_4"/>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.17-1" date="1463486400">- Version 0.17</changelog>
  <changelog author="Radek Novacek &lt;rnovacek@redhat.com&gt; 0.18-1" date="1476187200">- Version 0.18</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-1" date="1488456000">- 1415497: Support rhev4 auto detection and usage (pcreech@redhat.com)
- 1388577: Adding UTF-8 support (pcreech@redhat.com)
- 1410000: Include org_id in hv base channel (pcreech@redhat.com)
- 1400431: Fix AttributeError where val is missing (pcreech@redhat.com)
- 1405967: Filter host via glob or regex (pcreech@redhat.com)
- Adds --password option to virt-who-pasword (tstrachota@redhat.com)
- 1392390 Fix default interval handling (pcreech@redhat.com)
- BZ1405967  Add filter_hosts_regex, and exclude_hosts_regex to allow filtering
  large numbers of hosts easily (chris@chrisprocter.co.uk)
- 1369107: Only load files with .conf extension (pcreech@redhat.com)
- 1383436: Obey the interval setting (csnyder@redhat.com)
- 1299643: Update virt-who-config man page to include NO_PROXY
  (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-2" date="1490788800">- 1437229: Fix syntax error in exception handling (pcreech@redhat.com)
- Update the spec file for builds on more downstream platforms
  (csnyder@redhat.com)
- 1437228: Handle utf-8 within Xmlrpc transport (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-3" date="1491998400">- Do not join threads not started, fix up fake backend (csnyder@redhat.com)
- 1439317: Ensure reports are still sent despite duplicate configurations
  (csnyder@redhat.com)
- 1436811: Send reports on the interval per destination (csnyder@redhat.com)
- 1436517: Set Version header for version detect (pcreech@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-4" date="1493035200">- 1436517: Fix api base detection for rhevm version 3 and 4
  (csnyder@redhat.com)
- 1442337: Send updates immediately the first run (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-5" date="1495022400">- 1448267: Fix polling behavior for oneshot, CTRL-C, 429 responses
  (csnyder@redhat.com)
- 1450747: Continue running destination threads on internal failure
  (csnyder@redhat.com)
- 1444718: Log name of config when duplicate reports are retrieved
  (csnyder@redhat.com)
- 1447264: Keep running on InvalidPasswordFormat given other valid configs
  (csnyder@redhat.com)
- 1369107: Update docs and log messages to show the *.conf requirement
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-6" date="1500638400">- 1458674: Update use of result data to match the new async api
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.19-7" date="1508932800">- 1506263: Updates to the job polling frequency (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.19-8" date="1517832000">- 1540296: Add JSON-RPC support for VDSM (khowell@redhat.com)</changelog>
</package>
<package pkgid="bbf5a4f85b066cd179a8123b104c699c872a7aea694fb52bf04a326ebe8a56df" name="webkitgtk4" arch="i686">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="e996ff3f21b12edee4d3d0da4882bd79e3b96616d425e742e2391dd7e04ce0a7" name="webkitgtk4" arch="src">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="597fda05a261cab10355b77b7752d3367a8325819c80a0c97d28bdb101105bfa" name="webkitgtk4" arch="src">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="524a813cb6d2a71353f2bd85744207f4895590503828fdc2dfc9cb4eef25bc0d" name="webkitgtk4" arch="x86_64">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="fd647af82c8cfc6ebc3866b3b985a4ae0af5c6bc57a6a6fbf7260be62fd24daa" name="webkitgtk4-debuginfo" arch="i686">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="bdda4ab3bc9cf403a55507e340b4586546bd908e99105634d4946d5b5d8053e6" name="webkitgtk4-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="4cae3b34a6b783f0c3200e7cab81a020d0a7e5b4c5071a141f544c4aa253b79d" name="webkitgtk4-devel" arch="i686">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="d11c360f72ae8a7e85e50f5dc34cfd7ab8a85cc292314faa2a9dd85c845a5441" name="webkitgtk4-devel" arch="x86_64">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="ddd806571413b09564f2460f8401de54cebd3c0a4079dc6a57009d2941eca1d7" name="webkitgtk4-doc" arch="noarch">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="20e10f22a211d86cc2b9db64d910efc1edec71ad58b95bb1b6b47f45416629f2" name="webkitgtk4-doc" arch="noarch">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="0355df9f3d1c34137f7d34ad814732f5fb3bccfee6bfc687bb248bef8c56df6f" name="webkitgtk4-jsc" arch="i686">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="4fe5af9841d4247ad446235c877d7260d9ae8b179c3e84a7543543d3fca3cde0" name="webkitgtk4-jsc" arch="x86_64">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="de06f480537d40c0255773b92ddfe02564b6c30e44e041c23ee21b6cee004975" name="webkitgtk4-jsc-devel" arch="i686">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="1a38e47b4dd3c8074ce5fd777441e8773bc042781564b50550b588aa240c567f" name="webkitgtk4-jsc-devel" arch="x86_64">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="8f650c6cf93cc54a3d51870e7b0866cb954bacac83255c6b06a59ccc726b6da1" name="webkitgtk4-plugin-process-gtk2" arch="i686">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="c82410e2f380bba5b12e03312116f5cfd502e16e4a228ab1537bcdcfcc7e6f87" name="webkitgtk4-plugin-process-gtk2" arch="x86_64">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="8723c2e31233ebbb68d52875fa0d28517b7a65780a79d4edb2cb72dbcc896cf9" name="wget" arch="i686">
  <version epoch="0" ver="1.14" rel="15.el7_4.1"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-7" date="1373457600">- Fix double free of iri-&gt;orig_url (#981778)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-8" date="1373889600">- Fix deadcode and possible use of NULL in vprintf (#913153)
- Add documentation for --regex-type and --preserve-permissions
- Fix --preserve-permissions to work as documented (and expected)
- Fix bug when authenticating using user:password@url syntax (#912358)
- Document and fix --backups option</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.14-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.14-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-11" date="1414152000">- Fix CVE-2014-4877 wget: FTP symlink arbitrary filesystem access (#1156136)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-12" date="1458561600">- Fix wget to include Host header on CONNECT as required by HTTP 1.1 (#1203384)
- Run internal test suite during build (#1295846)
- Fix -nv being documented as synonym for two options (#1147572)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-13" date="1466424000">- Fix CVE-2016-4971 (#1345778)
- Added support for non-ASCII URLs (Related: CVE-2016-4971)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-14" date="1491998400">- TLS v1.1 and v1.2 can now be specified with --secure-protocol option (#1439811)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-15" date="1493985600">- Added TLSv1_1 and TLSv1_2 as secure-protocol values to help (#1439811)
- Fixed synchronization in randomly failing unit test Test-proxied-https-auth (#1448440)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-15.1" date="1508846400">- Fixed various security flaws (CVE-2017-13089, CVE-2017-13090)</changelog>
</package>
<package pkgid="ccae116cfda9db0d1c799b2e15248e6c7cf9945ede11564901d15a4cb80d795a" name="wget" arch="src">
  <version epoch="0" ver="1.14" rel="15.el7_4.1"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-7" date="1373457600">- Fix double free of iri-&gt;orig_url (#981778)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-8" date="1373889600">- Fix deadcode and possible use of NULL in vprintf (#913153)
- Add documentation for --regex-type and --preserve-permissions
- Fix --preserve-permissions to work as documented (and expected)
- Fix bug when authenticating using user:password@url syntax (#912358)
- Document and fix --backups option</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.14-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.14-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-11" date="1414152000">- Fix CVE-2014-4877 wget: FTP symlink arbitrary filesystem access (#1156136)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-12" date="1458561600">- Fix wget to include Host header on CONNECT as required by HTTP 1.1 (#1203384)
- Run internal test suite during build (#1295846)
- Fix -nv being documented as synonym for two options (#1147572)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-13" date="1466424000">- Fix CVE-2016-4971 (#1345778)
- Added support for non-ASCII URLs (Related: CVE-2016-4971)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-14" date="1491998400">- TLS v1.1 and v1.2 can now be specified with --secure-protocol option (#1439811)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-15" date="1493985600">- Added TLSv1_1 and TLSv1_2 as secure-protocol values to help (#1439811)
- Fixed synchronization in randomly failing unit test Test-proxied-https-auth (#1448440)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-15.1" date="1508846400">- Fixed various security flaws (CVE-2017-13089, CVE-2017-13090)</changelog>
</package>
<package pkgid="1085022736cd9d1f4701af4282bf8cb2336c7ca4ef23dcd90622c33877c74489" name="wget" arch="src">
  <version epoch="0" ver="1.14" rel="15.el7_4.1"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-7" date="1373457600">- Fix double free of iri-&gt;orig_url (#981778)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-8" date="1373889600">- Fix deadcode and possible use of NULL in vprintf (#913153)
- Add documentation for --regex-type and --preserve-permissions
- Fix --preserve-permissions to work as documented (and expected)
- Fix bug when authenticating using user:password@url syntax (#912358)
- Document and fix --backups option</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.14-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.14-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-11" date="1414152000">- Fix CVE-2014-4877 wget: FTP symlink arbitrary filesystem access (#1156136)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-12" date="1458561600">- Fix wget to include Host header on CONNECT as required by HTTP 1.1 (#1203384)
- Run internal test suite during build (#1295846)
- Fix -nv being documented as synonym for two options (#1147572)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-13" date="1466424000">- Fix CVE-2016-4971 (#1345778)
- Added support for non-ASCII URLs (Related: CVE-2016-4971)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-14" date="1491998400">- TLS v1.1 and v1.2 can now be specified with --secure-protocol option (#1439811)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-15" date="1493985600">- Added TLSv1_1 and TLSv1_2 as secure-protocol values to help (#1439811)
- Fixed synchronization in randomly failing unit test Test-proxied-https-auth (#1448440)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-15.1" date="1508846400">- Fixed various security flaws (CVE-2017-13089, CVE-2017-13090)</changelog>
</package>
<package pkgid="b23e9856d8eda09f96315283689d445e76e38eebb987860410c88aec70ac6b65" name="wget" arch="x86_64">
  <version epoch="0" ver="1.14" rel="15.el7_4.1"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-7" date="1373457600">- Fix double free of iri-&gt;orig_url (#981778)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-8" date="1373889600">- Fix deadcode and possible use of NULL in vprintf (#913153)
- Add documentation for --regex-type and --preserve-permissions
- Fix --preserve-permissions to work as documented (and expected)
- Fix bug when authenticating using user:password@url syntax (#912358)
- Document and fix --backups option</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.14-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.14-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-11" date="1414152000">- Fix CVE-2014-4877 wget: FTP symlink arbitrary filesystem access (#1156136)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-12" date="1458561600">- Fix wget to include Host header on CONNECT as required by HTTP 1.1 (#1203384)
- Run internal test suite during build (#1295846)
- Fix -nv being documented as synonym for two options (#1147572)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-13" date="1466424000">- Fix CVE-2016-4971 (#1345778)
- Added support for non-ASCII URLs (Related: CVE-2016-4971)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-14" date="1491998400">- TLS v1.1 and v1.2 can now be specified with --secure-protocol option (#1439811)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-15" date="1493985600">- Added TLSv1_1 and TLSv1_2 as secure-protocol values to help (#1439811)
- Fixed synchronization in randomly failing unit test Test-proxied-https-auth (#1448440)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-15.1" date="1508846400">- Fixed various security flaws (CVE-2017-13089, CVE-2017-13090)</changelog>
</package>
<package pkgid="c534ab0bc080cf433c52e922e29e1a2e19ba1885110edc896cf59d47344516bb" name="wget-debuginfo" arch="i686">
  <version epoch="0" ver="1.14" rel="15.el7_4.1"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-7" date="1373457600">- Fix double free of iri-&gt;orig_url (#981778)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-8" date="1373889600">- Fix deadcode and possible use of NULL in vprintf (#913153)
- Add documentation for --regex-type and --preserve-permissions
- Fix --preserve-permissions to work as documented (and expected)
- Fix bug when authenticating using user:password@url syntax (#912358)
- Document and fix --backups option</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.14-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.14-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-11" date="1414152000">- Fix CVE-2014-4877 wget: FTP symlink arbitrary filesystem access (#1156136)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-12" date="1458561600">- Fix wget to include Host header on CONNECT as required by HTTP 1.1 (#1203384)
- Run internal test suite during build (#1295846)
- Fix -nv being documented as synonym for two options (#1147572)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-13" date="1466424000">- Fix CVE-2016-4971 (#1345778)
- Added support for non-ASCII URLs (Related: CVE-2016-4971)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-14" date="1491998400">- TLS v1.1 and v1.2 can now be specified with --secure-protocol option (#1439811)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-15" date="1493985600">- Added TLSv1_1 and TLSv1_2 as secure-protocol values to help (#1439811)
- Fixed synchronization in randomly failing unit test Test-proxied-https-auth (#1448440)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-15.1" date="1508846400">- Fixed various security flaws (CVE-2017-13089, CVE-2017-13090)</changelog>
</package>
<package pkgid="e46bd3cfb4c8b1b52eebd9f93f41cef39fc7dd4f2c9ef9e35eb779cb25e8301a" name="wget-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.14" rel="15.el7_4.1"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-7" date="1373457600">- Fix double free of iri-&gt;orig_url (#981778)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-8" date="1373889600">- Fix deadcode and possible use of NULL in vprintf (#913153)
- Add documentation for --regex-type and --preserve-permissions
- Fix --preserve-permissions to work as documented (and expected)
- Fix bug when authenticating using user:password@url syntax (#912358)
- Document and fix --backups option</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.14-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.14-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-11" date="1414152000">- Fix CVE-2014-4877 wget: FTP symlink arbitrary filesystem access (#1156136)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-12" date="1458561600">- Fix wget to include Host header on CONNECT as required by HTTP 1.1 (#1203384)
- Run internal test suite during build (#1295846)
- Fix -nv being documented as synonym for two options (#1147572)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-13" date="1466424000">- Fix CVE-2016-4971 (#1345778)
- Added support for non-ASCII URLs (Related: CVE-2016-4971)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-14" date="1491998400">- TLS v1.1 and v1.2 can now be specified with --secure-protocol option (#1439811)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-15" date="1493985600">- Added TLSv1_1 and TLSv1_2 as secure-protocol values to help (#1439811)
- Fixed synchronization in randomly failing unit test Test-proxied-https-auth (#1448440)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-15.1" date="1508846400">- Fixed various security flaws (CVE-2017-13089, CVE-2017-13090)</changelog>
</package>
<package pkgid="7dd77aa67f523e581aac2e5ef1dc1769967e2043c2ba45ca78cbcab30ed35729" name="wpa_supplicant" arch="i686">
  <version epoch="1" ver="2.6" rel="5.el7_4.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:2.0-19" date="1452513600">- nl80211: resubscribe to netlink events when cfg80211 gets re-added (rh #1085473)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:2.0-20" date="1458561600">- D-Bus: Don't do &lt;deny send_interface="..." /&gt; in dbus service file (rh #1319796)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.0-21" date="1470744000">- fix wpa_supplicant.sysconfig to avoid duplicate -u and -f arguments (rh #1351388)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.0-22" date="1481889600">- bump revision for RHEL7.4 rebuild</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-1" date="1486728000">- Update to 2.6 (rh #1404793)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-2" date="1488888000">- Backport support for IEEE 802.1AE MACsec (rh #1338005)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-3" date="1489147200">- Fix coverity failures (rh #1430407)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:2.6-4" date="1491220800">- Include MACsec headers (rh #1438007)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-5" date="1495022400">- macsec: Fix segmentation fault in case macsec.ko is not loaded (rh #1440646)
- nl80211: Fix race condition in detecting MAC change (rh #1447073)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-5.1" date="1507896000">- avoid key reinstallation (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079,
  CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086,
  CVE-2017-13087, CVE-2017-13088)</changelog>
</package>
<package pkgid="66f92f0adad41340889262d2a224f7506ccf9a55b431291d60320c890b129dc1" name="wpa_supplicant" arch="src">
  <version epoch="1" ver="2.6" rel="5.el7_4.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:2.0-19" date="1452513600">- nl80211: resubscribe to netlink events when cfg80211 gets re-added (rh #1085473)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:2.0-20" date="1458561600">- D-Bus: Don't do &lt;deny send_interface="..." /&gt; in dbus service file (rh #1319796)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.0-21" date="1470744000">- fix wpa_supplicant.sysconfig to avoid duplicate -u and -f arguments (rh #1351388)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.0-22" date="1481889600">- bump revision for RHEL7.4 rebuild</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-1" date="1486728000">- Update to 2.6 (rh #1404793)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-2" date="1488888000">- Backport support for IEEE 802.1AE MACsec (rh #1338005)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-3" date="1489147200">- Fix coverity failures (rh #1430407)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:2.6-4" date="1491220800">- Include MACsec headers (rh #1438007)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-5" date="1495022400">- macsec: Fix segmentation fault in case macsec.ko is not loaded (rh #1440646)
- nl80211: Fix race condition in detecting MAC change (rh #1447073)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-5.1" date="1507896000">- avoid key reinstallation (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079,
  CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086,
  CVE-2017-13087, CVE-2017-13088)</changelog>
</package>
<package pkgid="c14fe6e09e6c1579ece2b5c93682ab628c1e3dbd6c942f3891dc695155ac7285" name="wpa_supplicant" arch="src">
  <version epoch="1" ver="2.6" rel="5.el7_4.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:2.0-19" date="1452513600">- nl80211: resubscribe to netlink events when cfg80211 gets re-added (rh #1085473)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:2.0-20" date="1458561600">- D-Bus: Don't do &lt;deny send_interface="..." /&gt; in dbus service file (rh #1319796)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.0-21" date="1470744000">- fix wpa_supplicant.sysconfig to avoid duplicate -u and -f arguments (rh #1351388)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.0-22" date="1481889600">- bump revision for RHEL7.4 rebuild</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-1" date="1486728000">- Update to 2.6 (rh #1404793)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-2" date="1488888000">- Backport support for IEEE 802.1AE MACsec (rh #1338005)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-3" date="1489147200">- Fix coverity failures (rh #1430407)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:2.6-4" date="1491220800">- Include MACsec headers (rh #1438007)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-5" date="1495022400">- macsec: Fix segmentation fault in case macsec.ko is not loaded (rh #1440646)
- nl80211: Fix race condition in detecting MAC change (rh #1447073)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-5.1" date="1507896000">- avoid key reinstallation (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079,
  CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086,
  CVE-2017-13087, CVE-2017-13088)</changelog>
</package>
<package pkgid="aa9af8af975f043c22153ab0993103575d11220abf4bfa8738ea1e0b3f179f23" name="wpa_supplicant" arch="x86_64">
  <version epoch="1" ver="2.6" rel="5.el7_4.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:2.0-19" date="1452513600">- nl80211: resubscribe to netlink events when cfg80211 gets re-added (rh #1085473)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:2.0-20" date="1458561600">- D-Bus: Don't do &lt;deny send_interface="..." /&gt; in dbus service file (rh #1319796)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.0-21" date="1470744000">- fix wpa_supplicant.sysconfig to avoid duplicate -u and -f arguments (rh #1351388)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.0-22" date="1481889600">- bump revision for RHEL7.4 rebuild</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-1" date="1486728000">- Update to 2.6 (rh #1404793)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-2" date="1488888000">- Backport support for IEEE 802.1AE MACsec (rh #1338005)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-3" date="1489147200">- Fix coverity failures (rh #1430407)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:2.6-4" date="1491220800">- Include MACsec headers (rh #1438007)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-5" date="1495022400">- macsec: Fix segmentation fault in case macsec.ko is not loaded (rh #1440646)
- nl80211: Fix race condition in detecting MAC change (rh #1447073)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-5.1" date="1507896000">- avoid key reinstallation (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079,
  CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086,
  CVE-2017-13087, CVE-2017-13088)</changelog>
</package>
<package pkgid="6b3d39428309e6f0b52355f5d8a7c9c5006ab1e673dba664ba7b7e99892bd0ad" name="wpa_supplicant-debuginfo" arch="i686">
  <version epoch="1" ver="2.6" rel="5.el7_4.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:2.0-19" date="1452513600">- nl80211: resubscribe to netlink events when cfg80211 gets re-added (rh #1085473)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:2.0-20" date="1458561600">- D-Bus: Don't do &lt;deny send_interface="..." /&gt; in dbus service file (rh #1319796)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.0-21" date="1470744000">- fix wpa_supplicant.sysconfig to avoid duplicate -u and -f arguments (rh #1351388)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.0-22" date="1481889600">- bump revision for RHEL7.4 rebuild</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-1" date="1486728000">- Update to 2.6 (rh #1404793)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-2" date="1488888000">- Backport support for IEEE 802.1AE MACsec (rh #1338005)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-3" date="1489147200">- Fix coverity failures (rh #1430407)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:2.6-4" date="1491220800">- Include MACsec headers (rh #1438007)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-5" date="1495022400">- macsec: Fix segmentation fault in case macsec.ko is not loaded (rh #1440646)
- nl80211: Fix race condition in detecting MAC change (rh #1447073)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-5.1" date="1507896000">- avoid key reinstallation (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079,
  CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086,
  CVE-2017-13087, CVE-2017-13088)</changelog>
</package>
<package pkgid="f97d7bea76bb78618a19ed945543f28de841c507c680f216546e6eefcdf510a6" name="wpa_supplicant-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.6" rel="5.el7_4.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:2.0-19" date="1452513600">- nl80211: resubscribe to netlink events when cfg80211 gets re-added (rh #1085473)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:2.0-20" date="1458561600">- D-Bus: Don't do &lt;deny send_interface="..." /&gt; in dbus service file (rh #1319796)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.0-21" date="1470744000">- fix wpa_supplicant.sysconfig to avoid duplicate -u and -f arguments (rh #1351388)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.0-22" date="1481889600">- bump revision for RHEL7.4 rebuild</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-1" date="1486728000">- Update to 2.6 (rh #1404793)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-2" date="1488888000">- Backport support for IEEE 802.1AE MACsec (rh #1338005)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-3" date="1489147200">- Fix coverity failures (rh #1430407)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:2.6-4" date="1491220800">- Include MACsec headers (rh #1438007)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-5" date="1495022400">- macsec: Fix segmentation fault in case macsec.ko is not loaded (rh #1440646)
- nl80211: Fix race condition in detecting MAC change (rh #1447073)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-5.1" date="1507896000">- avoid key reinstallation (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079,
  CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086,
  CVE-2017-13087, CVE-2017-13088)</changelog>
</package>
<package pkgid="40df4eb22786696c50f3b2f7eacbb6e0d6915f00a41e04fb522b58658cc54728" name="xmlsec1" arch="i686">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="b6edea22cea0b68f67cbe4b797d0a6b6d87f33ad8952d3b1456dbb4f97e7e15f" name="xmlsec1" arch="src">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="c91b2ea44150843f6e092b1b146d826bf96beb7b34d37587485ae29f8d04d162" name="xmlsec1" arch="src">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="29a6b54bb428964de02df0ef19d53ddf20fc43ab7c4bfe79bb86fd1e9e407c16" name="xmlsec1" arch="x86_64">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="bd252ff9e056aafd08f2cfd42b0b4c11172b02e6c2e74127a1c7986ba33dbe4e" name="xmlsec1-debuginfo" arch="i686">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="cd6cdbb0c33ecd06cbd7d6c0aa114f32ef67c54171ab7be3322257f4e48d9fda" name="xmlsec1-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="b9855121e125b9befb4a9927c8884b2c52a1261d98e040f3801eaab08bbe9591" name="xmlsec1-devel" arch="i686">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="0986bc7daee5269d6f6a41f5798ad5c2108e0f56925106cd425e5b10f1543038" name="xmlsec1-devel" arch="x86_64">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="fe55f27a5eedd57807b532b3a8a6a9bcb747055d30ca956e019ab8bf85f97572" name="xmlsec1-gcrypt" arch="i686">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="269c4d36bb349543847035851f9f571d6115402f579a738bb5acc3be05c48ea3" name="xmlsec1-gcrypt" arch="x86_64">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="6f8ccb3d703bec001b5777356f21c38b76e8db1162324451965d7f2577bbdccf" name="xmlsec1-gcrypt-devel" arch="i686">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="6abc1a2ff7dfc6630f7d3fb00f579d44dfaa9164eba2cc7a24c552f88cc721bd" name="xmlsec1-gcrypt-devel" arch="x86_64">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="da7ced6e501c7372c6faf501f406df06f1938cde303cb5d20ff4c217d75a940b" name="xmlsec1-gnutls" arch="i686">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="2f6249f337d45be9670c0cb9947bda157f89d043d7fa746f6e8992df7d301a0b" name="xmlsec1-gnutls" arch="x86_64">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="3c121feb80e7b516c6f0a45c897710890cde9f9b4fde0f8688304d4a529dbc45" name="xmlsec1-gnutls-devel" arch="i686">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="9b8f43da43b52138f07d70e19162ab549a61760ec941718c1854f0cb2e57edc5" name="xmlsec1-gnutls-devel" arch="x86_64">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="ce779bc13ca337f5d2eaa1b8fb5d84b63dbbc4673d44884b72074b5c96af79e6" name="xmlsec1-nss" arch="i686">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="a69235fa25d5d68c5f1a9fe5e6db2e849b92f028d4c8ec5681f603ff3a810433" name="xmlsec1-nss" arch="x86_64">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="4dbc8e5166fb5bd5c6df6b18bf217b564b8de7026d190d129c795763c48f1b58" name="xmlsec1-nss-devel" arch="i686">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="f0414a98ee804ac906f4cb1c3781591966ff7af1b844b6f4197f593d56f73909" name="xmlsec1-nss-devel" arch="x86_64">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="6a1cf2ebc0d5b4750af44fc44ad46f3a97898c3685f682894e9f211d6b525be0" name="xmlsec1-openssl" arch="i686">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="aa95f0c1154aee3e4585bb26611710b008f253b2dbae5a221b6856637f2c2c12" name="xmlsec1-openssl" arch="x86_64">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="a7f1bd9dc16334379d9746884b5344374d8af780daf41ab45c5a3d2286ce6514" name="xmlsec1-openssl-devel" arch="i686">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="2741ca159c848f2207fbd393a3fe873f02f8b4778a7a5a6529b9ea40473f074d" name="xmlsec1-openssl-devel" arch="x86_64">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="4a04429ce3391c86bc2fc22118a1d96406d54ce24d3d7bb938d157eed44fc8da" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="f8362fda8c43aa3bdaac852ae8ec3c7e96ab2d41f56c410c17524fdb1c0cb2db" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="b323f0c91ba22d01e89eedfdfb23afc876bff8328c7a51b2606951a68924b92b" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="dd9b7edc5fd77549019dbf4245b183624d4a872d7f7a67da6414b98aa619307d" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="363b53d041023d30dc980e15c5f93a594141b93ba74114aabb142b7e592758d6" name="xorg-x11-server-Xdmx" arch="i686">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="34794232bb45155c9dc1809bd54416d7cf64711f26bc5da7257e190fdae37078" name="xorg-x11-server-Xdmx" arch="x86_64">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="3d95e7418a883422099813e83162130878f552e12bb0fd1329f1d30e5c896029" name="xorg-x11-server-Xdmx" arch="i686">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="2925d66588f00a9b8f34bf45f78c59f6c497dc4d47cb9366b12c00870232b20f" name="xorg-x11-server-Xdmx" arch="x86_64">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="031246803ba1ffbfa0d4e66eb21815b1c9214a9dd5f9cc7c67d60b584af3cb20" name="xorg-x11-server-Xephyr" arch="i686">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="fc3bea536ad8721965a95cba0a6f607cd7e58be777772f4e249f7f4cdee822e9" name="xorg-x11-server-Xephyr" arch="x86_64">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="616ba37e84fdd4f09b7d432724f7efec47f596f2c254eb1a61bb351f20ce5032" name="xorg-x11-server-Xephyr" arch="i686">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="9e85564eb1a4b84985462df486ff2ead4906cf5e9c9c4ee5dc9263a1e6c7b17f" name="xorg-x11-server-Xephyr" arch="x86_64">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="6f7f8f696946097247202296b4fe416aff0f57ab23dd4fa5a5ca8a8ac2d6bb7b" name="xorg-x11-server-Xnest" arch="i686">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="016cf679f0048e2f0f1878738c40ec3add5024940b90f73800535153330464f0" name="xorg-x11-server-Xnest" arch="x86_64">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="15c8653c23c9b3b44330e7087fc553bec27688b150aff430bd34b24bdc6bed18" name="xorg-x11-server-Xnest" arch="i686">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="6d4e47a54424e212575eac4fd9a142bfa8fbd992688aa7595ae49b0bd83547d9" name="xorg-x11-server-Xnest" arch="x86_64">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="ad68a86f57eea7eb8b20e21fd6f3792195ec80b891fffe23145e769978f1b2aa" name="xorg-x11-server-Xorg" arch="i686">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="00c3fa889090285e352809789d413efeca512cd7f776f4ec86b52bc99a735e8b" name="xorg-x11-server-Xorg" arch="x86_64">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="2357ec618174d125571bf3707eb91596ef021107f4786fa940543645ca4dc54b" name="xorg-x11-server-Xorg" arch="i686">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="6bfc760695b27290038c8e176ca7ef37dcc9208d810b1806a025a194efb2c4e5" name="xorg-x11-server-Xorg" arch="x86_64">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="cc34b1a57e846f1d4e301d726300833af27d780f02674ee0be3b3cca81315bb1" name="xorg-x11-server-Xvfb" arch="i686">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="7a571439a6aa7374260dd59d5441d6f3d2c50802c60334d146c94e32c664f3b3" name="xorg-x11-server-Xvfb" arch="x86_64">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="c123b881923fe07a3f92df3848be8c14b9dd7d1a4f6eee5daa5dc9f63eabde36" name="xorg-x11-server-Xvfb" arch="i686">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="d431694dea8228c53b0e097be5358c71a5f14d33105e65d6379b28e1476e3f2c" name="xorg-x11-server-Xvfb" arch="x86_64">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="676113180e105ca22ea83c9a710f5d851e18b38ab561a57cef0029b49414c171" name="xorg-x11-server-common" arch="i686">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="7549aa53da8c1ae7b4c14516839a942a9a0812862f5a091d62823436a89712f7" name="xorg-x11-server-common" arch="x86_64">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="eb4b61f42928840c943e51dc18eab92eacd5dab5f4015656f58d8ccfefbefdf2" name="xorg-x11-server-common" arch="i686">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="fb3d725334d1af43add1731332ae8a004b82a2fa815df1d54ae288dd487003de" name="xorg-x11-server-common" arch="x86_64">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="d130bb81f1902aa73bf3573e52f63558c8f9aa90d332a49626c61eeb635bce6c" name="xorg-x11-server-debuginfo" arch="i686">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="6621be7565d49ec74b0847f713066b25435644cdcd21bf8bac30b529210ad0c2" name="xorg-x11-server-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="9346f8945d13e25accbae5e37903a9a07c3ef568cfc637e49901f403c820c208" name="xorg-x11-server-debuginfo" arch="i686">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="42bbe6e8560cd38a147d36df5573822907ca571c9316c1fa09aac5d1a1b3f7fc" name="xorg-x11-server-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="7df316a75fa60b60af3df46c89853b53085e6387fbad6acb6095cd7fb89c3d3a" name="xorg-x11-server-devel" arch="i686">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="d7326947b01c924811e8bef5266333cd00b6a530ca5fc70b65bac06eaaddc534" name="xorg-x11-server-devel" arch="x86_64">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="06612972c2d80cc3ee8e1902c377f02622ba11c47112e5700b48348fd6c23330" name="xorg-x11-server-devel" arch="i686">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="eaa117624de9a4ca4d665654f64021cbafba25bd2de4abb6fd2774407a05bfe4" name="xorg-x11-server-devel" arch="x86_64">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="0577d14a2713642f8601da21980837b7903f6d123eaf3a53bf40c9b8f711e572" name="xorg-x11-server-source" arch="noarch">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="305105c583531f5324e9801d7ffe39e42d8176e64458ed83c6806b4133484d2a" name="xorg-x11-server-source" arch="noarch">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="795c91a895a70bfb6c3b7587d62f6f2ef462c2cadd0bd2e51ffa55d418378b8f" name="xorg-x11-server-source" arch="noarch">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="c00274bc2d78b50fa5da0db349e089771b96000776d2f8c9a74d469a07e6f0c8" name="xorg-x11-server-source" arch="noarch">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="3b0615920f0778f5aa23fc1aa6fb659c416d0417da5db17a77cedf96e09fc56f" name="yum" arch="noarch">
  <version epoch="0" ver="3.4.3" rel="154.el7.centos.1"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-147" date="1469188800">- Better exception handling in fssnap.
- Resolves: bug#1335250</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-148" date="1470312000">- Don't change method signature for lazy:packages.
- Related: bug#1337105</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-149" date="1472472000">- Report __del__ RepoError exceptions into log instead of stderr.
- Resolves: bug#1356797</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-150" date="1474286400">- Check for _metadata_cache_req properly.
- Resolves: bug#1377328</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-151" date="1486036800">- Add repo-id to repomd timestamp error message.
- Resolves: bug#1389816
- Don't recommend makecache if just running.
- Resolves: bug#1369389
- Add logging of bad update notice duplicates.
- Resolves: bug#1194915</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-152" date="1486382400">- Fix 'history package-list'.
- Resolves: bug#1410326</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-153" date="1488456000">- Filter duplicates when counting security updates.
- Resolves: bug#1399628
- sqlitesack: fix filelist queries for duplicate pkgs.
- Resolves: bug#1391507</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-154" date="1490616000">- Add payload_gpgcheck option.
- Resolves: bug#1343690
- Add hint about rm -rf for yum clean all.
- Resolves: bug#1357083
- Have "yum check" ignore self conflicts.
- Resolves: bug#1370134
- Detect installed virtual provide in install().
- Resolves: bug#1352585
- Fix reget problems with simple md filenames.
- Resolves: bug#1397829</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.4.3-154.el7.centos" date="1501588800">- CentOS yum config
-  use the CentOS bug tracker url
-  retain installonly limit of 5
-  ensure distrover is always from centos-release
- Make yum require yum-plugin-fastestmirror</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 3.4.3-154.el7.centos.1" date="1517313600">- Remove access.redhat.com knowledge base articles and point to 
  wiki.centos.org instead</changelog>
</package>
<package pkgid="5ce0fdd7326239a5f4bd563517c14ceb0fd99c85ab4516e34b251e1c27906719" name="yum" arch="noarch">
  <version epoch="0" ver="3.4.3" rel="154.el7.centos.1"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-147" date="1469188800">- Better exception handling in fssnap.
- Resolves: bug#1335250</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-148" date="1470312000">- Don't change method signature for lazy:packages.
- Related: bug#1337105</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-149" date="1472472000">- Report __del__ RepoError exceptions into log instead of stderr.
- Resolves: bug#1356797</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-150" date="1474286400">- Check for _metadata_cache_req properly.
- Resolves: bug#1377328</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-151" date="1486036800">- Add repo-id to repomd timestamp error message.
- Resolves: bug#1389816
- Don't recommend makecache if just running.
- Resolves: bug#1369389
- Add logging of bad update notice duplicates.
- Resolves: bug#1194915</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-152" date="1486382400">- Fix 'history package-list'.
- Resolves: bug#1410326</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-153" date="1488456000">- Filter duplicates when counting security updates.
- Resolves: bug#1399628
- sqlitesack: fix filelist queries for duplicate pkgs.
- Resolves: bug#1391507</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-154" date="1490616000">- Add payload_gpgcheck option.
- Resolves: bug#1343690
- Add hint about rm -rf for yum clean all.
- Resolves: bug#1357083
- Have "yum check" ignore self conflicts.
- Resolves: bug#1370134
- Detect installed virtual provide in install().
- Resolves: bug#1352585
- Fix reget problems with simple md filenames.
- Resolves: bug#1397829</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.4.3-154.el7.centos" date="1501588800">- CentOS yum config
-  use the CentOS bug tracker url
-  retain installonly limit of 5
-  ensure distrover is always from centos-release
- Make yum require yum-plugin-fastestmirror</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 3.4.3-154.el7.centos.1" date="1517313600">- Remove access.redhat.com knowledge base articles and point to 
  wiki.centos.org instead</changelog>
</package>
<package pkgid="b5be4609feeae4a9f0527a495b5e92aa25d51aea596506cda1d55a94584bccd3" name="yum" arch="src">
  <version epoch="0" ver="3.4.3" rel="154.el7.centos.1"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-147" date="1469188800">- Better exception handling in fssnap.
- Resolves: bug#1335250</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-148" date="1470312000">- Don't change method signature for lazy:packages.
- Related: bug#1337105</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-149" date="1472472000">- Report __del__ RepoError exceptions into log instead of stderr.
- Resolves: bug#1356797</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-150" date="1474286400">- Check for _metadata_cache_req properly.
- Resolves: bug#1377328</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-151" date="1486036800">- Add repo-id to repomd timestamp error message.
- Resolves: bug#1389816
- Don't recommend makecache if just running.
- Resolves: bug#1369389
- Add logging of bad update notice duplicates.
- Resolves: bug#1194915</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-152" date="1486382400">- Fix 'history package-list'.
- Resolves: bug#1410326</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-153" date="1488456000">- Filter duplicates when counting security updates.
- Resolves: bug#1399628
- sqlitesack: fix filelist queries for duplicate pkgs.
- Resolves: bug#1391507</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-154" date="1490616000">- Add payload_gpgcheck option.
- Resolves: bug#1343690
- Add hint about rm -rf for yum clean all.
- Resolves: bug#1357083
- Have "yum check" ignore self conflicts.
- Resolves: bug#1370134
- Detect installed virtual provide in install().
- Resolves: bug#1352585
- Fix reget problems with simple md filenames.
- Resolves: bug#1397829</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.4.3-154.el7.centos" date="1501588800">- CentOS yum config
-  use the CentOS bug tracker url
-  retain installonly limit of 5
-  ensure distrover is always from centos-release
- Make yum require yum-plugin-fastestmirror</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 3.4.3-154.el7.centos.1" date="1517313600">- Remove access.redhat.com knowledge base articles and point to 
  wiki.centos.org instead</changelog>
</package>
<package pkgid="91671350261146a24bc00fe7d62b07479e1d19fb07eae9fa945f4c730be4e0aa" name="yum" arch="src">
  <version epoch="0" ver="3.4.3" rel="154.el7.centos.1"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-147" date="1469188800">- Better exception handling in fssnap.
- Resolves: bug#1335250</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-148" date="1470312000">- Don't change method signature for lazy:packages.
- Related: bug#1337105</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-149" date="1472472000">- Report __del__ RepoError exceptions into log instead of stderr.
- Resolves: bug#1356797</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-150" date="1474286400">- Check for _metadata_cache_req properly.
- Resolves: bug#1377328</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-151" date="1486036800">- Add repo-id to repomd timestamp error message.
- Resolves: bug#1389816
- Don't recommend makecache if just running.
- Resolves: bug#1369389
- Add logging of bad update notice duplicates.
- Resolves: bug#1194915</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-152" date="1486382400">- Fix 'history package-list'.
- Resolves: bug#1410326</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-153" date="1488456000">- Filter duplicates when counting security updates.
- Resolves: bug#1399628
- sqlitesack: fix filelist queries for duplicate pkgs.
- Resolves: bug#1391507</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-154" date="1490616000">- Add payload_gpgcheck option.
- Resolves: bug#1343690
- Add hint about rm -rf for yum clean all.
- Resolves: bug#1357083
- Have "yum check" ignore self conflicts.
- Resolves: bug#1370134
- Detect installed virtual provide in install().
- Resolves: bug#1352585
- Fix reget problems with simple md filenames.
- Resolves: bug#1397829</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.4.3-154.el7.centos" date="1501588800">- CentOS yum config
-  use the CentOS bug tracker url
-  retain installonly limit of 5
-  ensure distrover is always from centos-release
- Make yum require yum-plugin-fastestmirror</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 3.4.3-154.el7.centos.1" date="1517313600">- Remove access.redhat.com knowledge base articles and point to 
  wiki.centos.org instead</changelog>
</package>
<package pkgid="5916b5a074177aa1feff7bfbc3e3e32634c32beea9fbd3c2fd09b28f2986a388" name="yum-cron" arch="noarch">
  <version epoch="0" ver="3.4.3" rel="154.el7.centos.1"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-147" date="1469188800">- Better exception handling in fssnap.
- Resolves: bug#1335250</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-148" date="1470312000">- Don't change method signature for lazy:packages.
- Related: bug#1337105</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-149" date="1472472000">- Report __del__ RepoError exceptions into log instead of stderr.
- Resolves: bug#1356797</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-150" date="1474286400">- Check for _metadata_cache_req properly.
- Resolves: bug#1377328</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-151" date="1486036800">- Add repo-id to repomd timestamp error message.
- Resolves: bug#1389816
- Don't recommend makecache if just running.
- Resolves: bug#1369389
- Add logging of bad update notice duplicates.
- Resolves: bug#1194915</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-152" date="1486382400">- Fix 'history package-list'.
- Resolves: bug#1410326</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-153" date="1488456000">- Filter duplicates when counting security updates.
- Resolves: bug#1399628
- sqlitesack: fix filelist queries for duplicate pkgs.
- Resolves: bug#1391507</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-154" date="1490616000">- Add payload_gpgcheck option.
- Resolves: bug#1343690
- Add hint about rm -rf for yum clean all.
- Resolves: bug#1357083
- Have "yum check" ignore self conflicts.
- Resolves: bug#1370134
- Detect installed virtual provide in install().
- Resolves: bug#1352585
- Fix reget problems with simple md filenames.
- Resolves: bug#1397829</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.4.3-154.el7.centos" date="1501588800">- CentOS yum config
-  use the CentOS bug tracker url
-  retain installonly limit of 5
-  ensure distrover is always from centos-release
- Make yum require yum-plugin-fastestmirror</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 3.4.3-154.el7.centos.1" date="1517313600">- Remove access.redhat.com knowledge base articles and point to 
  wiki.centos.org instead</changelog>
</package>
<package pkgid="f1b4af3b7fb1a58acd0eae90fefc2c56d55eed3adb653bcdea5b118641600b01" name="yum-cron" arch="noarch">
  <version epoch="0" ver="3.4.3" rel="154.el7.centos.1"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-147" date="1469188800">- Better exception handling in fssnap.
- Resolves: bug#1335250</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-148" date="1470312000">- Don't change method signature for lazy:packages.
- Related: bug#1337105</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-149" date="1472472000">- Report __del__ RepoError exceptions into log instead of stderr.
- Resolves: bug#1356797</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-150" date="1474286400">- Check for _metadata_cache_req properly.
- Resolves: bug#1377328</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-151" date="1486036800">- Add repo-id to repomd timestamp error message.
- Resolves: bug#1389816
- Don't recommend makecache if just running.
- Resolves: bug#1369389
- Add logging of bad update notice duplicates.
- Resolves: bug#1194915</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-152" date="1486382400">- Fix 'history package-list'.
- Resolves: bug#1410326</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-153" date="1488456000">- Filter duplicates when counting security updates.
- Resolves: bug#1399628
- sqlitesack: fix filelist queries for duplicate pkgs.
- Resolves: bug#1391507</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.4.3-154" date="1490616000">- Add payload_gpgcheck option.
- Resolves: bug#1343690
- Add hint about rm -rf for yum clean all.
- Resolves: bug#1357083
- Have "yum check" ignore self conflicts.
- Resolves: bug#1370134
- Detect installed virtual provide in install().
- Resolves: bug#1352585
- Fix reget problems with simple md filenames.
- Resolves: bug#1397829</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.4.3-154.el7.centos" date="1501588800">- CentOS yum config
-  use the CentOS bug tracker url
-  retain installonly limit of 5
-  ensure distrover is always from centos-release
- Make yum require yum-plugin-fastestmirror</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 3.4.3-154.el7.centos.1" date="1517313600">- Remove access.redhat.com knowledge base articles and point to 
  wiki.centos.org instead</changelog>
</package>
</otherdata>